Hi,

I'm having problems connecting to a terminal server (Windows Server 2003)
without the user being a member of Administrators. Terminal Services
Licensing is installed and seems to work just fine. Users cannot connect if
they are only members of the Remote Desktop Users group. I've tried to add
the user to several different groups but the only time it works is when the
user is an administrator. This is a DC and it's the only server on the
network, since it is a small office network. Does anyone have a clue about
what I'm doing wrong here?

Regards,

Tomas Andersson

Tomas Andersson wrote:

> I'm having problems connecting to a terminal server (Windows Server 2003)
> without the user being a member of Administrators. Terminal Services
> Licensing is installed and seems to work just fine. Users cannot connect if
> they are only members of the Remote Desktop Users group. I've tried to add
> the user to several different groups but the only time it works is when the
> user is an administrator. This is a DC and it's the only server on the

I think you have the problem here. Other users than administrators
cannot normally log on to a DC interactively.

> network, since it is a small office network. Does anyone have a clue about
> what I'm doing wrong here?

To allow Domain Users group to log on, open Control Panel ->
Administrative Tools -> Default Domain Controller Security Settings ->
Local Policies -> User Rights Assignment. To the "Allow log on locally"
setting, add the group "Domain Users".

--
Olof Lagerkvist
ICQ: 724451
Web page: http://here.is/olof

Hi,

Unfortunately, it seems like it doesn't matter what groups or users I add to
"Log on locally", they can still not log on. The only way it seems is to
have the specific application that the users are supposed to run setup to
run automatically, since I don't believe that any of the users in question
would know what rights they have, even if the are administrators ;-)

I will inform the company though, that if they want to increase security,
they would need to setup a specific server for terminal services.

Tomas

"Olof Lagerkvist" <(E-Mail Removed)> wrote in message
news:Uw50c.84474$(E-Mail Removed)...
> Tomas Andersson wrote:
>
> > I'm having problems connecting to a terminal server (Windows Server
2003)
> > without the user being a member of Administrators. Terminal Services
> > Licensing is installed and seems to work just fine. Users cannot connect
if
> > they are only members of the Remote Desktop Users group. I've tried to
add
> > the user to several different groups but the only time it works is when
the
> > user is an administrator. This is a DC and it's the only server on the
>
> I think you have the problem here. Other users than administrators
> cannot normally log on to a DC interactively.
>
> > network, since it is a small office network. Does anyone have a clue
about
> > what I'm doing wrong here?
>
> To allow Domain Users group to log on, open Control Panel ->
> Administrative Tools -> Default Domain Controller Security Settings ->
> Local Policies -> User Rights Assignment. To the "Allow log on locally"
> setting, add the group "Domain Users".
>
> --
> Olof Lagerkvist
> ICQ: 724451
> Web page: http://here.is/olof
>