Re: Just administrator can access TS



Check RDP-TCP in the TS Config snap-in and confirm that Remote Desktop Users is there and has appropriate rights.

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

Rene B wrote:
it is win2k3 server
It is not a DC
error: "To log on this remote computer, you must be granted the Allow Log on through Terminal Services rigtht. By default , members of the Remote Desktop Users group have ....."

Event Log after try to connect to TS:
just secuity shows events
Security:
--- LOG 1: ---
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 576
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
Special privileges assigned to new logon:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Privileges: SeSecurityPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeLoadDriverPrivilege
SeImpersonatePrivilege

--- LOG 2 --
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
Successful Network Logon:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:
Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

-- LOG 3 --
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
User Logoff:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Logon Type: 3

Thanks Jeff


"Jeff Pitsch" <Jeff@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:e5jV6zfzHHA.464@xxxxxxxxxxxxxxxxxxxxxxx
This is a win2k3 server correct? is it a domain controller? What error message are they receiving when they try to connect? What do the event logs show when they connect?

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

Rene B wrote:
Hello everybody,

I have problem accessing TS with RDC as any other user diferent than administrator even if the user is part of the administrators group.

This is my configuration:
MDC Server1 (TS License Server)
member server Server2 TS Application mode
Licensing: Per User (5 cals installed)
Local Policy: Allow log on through Terminal Services = Administrators, Remote Desktop Users

User1: member of Domain Users, Remote Desktop User, Administrators
User2: member of Domain Users, Remote Desktop User

non of the users can access TS remotely, users can login locally on TS

What else should I do?


.



Relevant Pages

  • RE: The local policy of this system does not allow you to log on inter
    ... If the server is a 2003 Member Server, then the only things required for RDP ... Member of the local Remote Desktop User's Group, or a group with User & ... Users do NOT require the logon locally right for 2003 TS, ... Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: users can not access TS PLEASE HELP
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... Administrators, Remote Desktop Users ... Event Source: Security ... Special privileges assigned to new logon: ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal server (4 people who took the 70-290 Exam).
    ... The policy of the terminal server does not allow logon ... local administrators and members of Remote Desktop Users ... The Interactive Logon Privilege has been disabled. ... Server is not selected. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Only Users with Administrator rights can logon to terminal ser
    ... add the users to the built-in domain local Remote Desktop Users ... Computer Configuration - Windows Settings - Security Settings - ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal Services Logon Issue
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... The security package Negotiate generated an exception. ... How far in the logon process do you get? ...
    (microsoft.public.windows.terminal_services)