I have a W2K sp4 box with TS Application mode working. I am trying to get users to login to the desktop using the RDP client from WinXP. The users have to have Domain Admin rights to logon to the TS. If I remove the user from the Domain Admins group when the user logs in I just get a Blue Screen. How can I troubleshoot this connection/permissions problem

Thanks

Anything in the EventLog? Do the users have appropriate permissions
on their profile folders?

I would download FileMon and RegMon from
http://www.sysinternals.com/. Run them as administrator and start
a TS session as a normal user.

FileMon and RegMon will show you all "access denied" errors
that occur, so that you can give your users the necessary
permissions on a file-to file or Registry subkey basis.

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

=?Utf-8?B?VFJI?= <(E-Mail Removed)> wrote in
news:1D8AB18E-770B-448C-BC02-(E-Mail Removed):

> I have a W2K sp4 box with TS Application mode working. I am
> trying to get users to login to the desktop using the RDP client
> from WinXP. The users have to have Domain Admin rights to logon
> to the TS. If I remove the user from the Domain Admins group
> when the user logs in I just get a Blue Screen. How can I
> troubleshoot this connection/permissions problem?
>
> Thanks

The domain admin group, is part of the local admin group.
The local admin group has full rights on the HKLM key in the registry.

Make sure the user has write access on his workstation to:
HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing\Store

You can use the regedt32.exe for settign correct security.

Stefan
http://www.printingsupport.com