Re: Terminal Service access Domain Controller and Non-Domain Controlle

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 22 Sep 2009 19:31:18 -0400

John B <JohnB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I have a user that I want to do minimal maintenance on a domain
controller, but do not want them to be an administrator in the
domain. I am unable to logon to the domain controller as that user. I
am able to logon to a non-domain controller server. The error that I
am getting is, "To log on to this remote computer, you must be
granted the Allow log on through Terminal Services right." I googled
this message, but was unable to find anything to help with this. Any
help with getting this to work would be greatly appreciated. Thanks.

John

Add them to the Remote Desktop Users group on this server. I'm assuming it's
a member server and not a DC.

Or edit the local policy to add this user to the "allowed to logon via
terminal services" setting (I forget where that is).

.

References:
- Terminal Service access Domain Controller and Non-Domain Controlle
  - From: John B

Prev by Date: Group Policy won't apply unless member of Local Admin
Next by Date: Re: Group Policy won't apply unless member of Local Admin
Previous by thread: Terminal Service access Domain Controller and Non-Domain Controlle
Next by thread: Group Policy won't apply unless member of Local Admin
Index(es):
- Date
- Thread

Relevant Pages

Re: Please help refresh my memory on AD DC
... Also when I promoted this Server 2008 box it did somthing that was not normal. ... DC would the only logon be a Domain logon or would the option to logon ... to Logon locally I would use the admin account of the Server 2003 machine. ... If you promote a server to Domain controller, there is no renaming of the ...
(microsoft.public.windows.server.active_directory)
Re: Windows 2003 member server with Windows 2000 Domain Controller
... If anyone is having a Windows 2003 member server with a Windows 2000 ... Windows cannot obtain the domain controller name for your computer ... There are currently no logon servers available to service the logon ...
(microsoft.public.win2000.security)
Re: Windows 2003 member server with Windows 2000 Domain Controller
... > Windows 2003 server, both registered the same event as mentioned below. ... > Event Source: NETLOGON ... > There are currently no logon servers available to service the logon ... > If this computer is a domain controller for the specified domain, ...
(microsoft.public.win2000.security)
Windows 2003 member server with Windows 2000 Domain Controller
... If anyone is having a Windows 2003 member server with a Windows 2000 Domain ... Windows cannot obtain the domain controller name for your computer network. ... There are currently no logon servers available to service the logon request. ...
(microsoft.public.win2000.security)
Re: Demote 1st DC Error
... "Don Wilwol" wrote in message ... > When a domain controller is demoted, the operational attribute> "GiveAwayAllFsmoRoles" is written, which triggers the domain controller to> locate other domain controllers to offload any roles it currently owns. ... Locate a server to which there is RPC connectivity. ...
(microsoft.public.windows.server.active_directory)