I have several Windows 2003 servers. It appears that on
the Domain controllers, I can't log into to the console,
but on the member servers, I can.

I really need console access as they are in different
offices.

Can anyone shed any light on this?

Thanks

John

I assume you are using the /console option?
What error message do you get? Anything in the EventLog? Have you
checked Logon Locally permissions (in the Default Domain Controller
Security Policy)?

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---

"Johnny Boy" <(E-Mail Removed)> wrote in
news:2fa601c3d92f$0adad630$(E-Mail Removed):

> I have several Windows 2003 servers. It appears that on
> the Domain controllers, I can't log into to the console,
> but on the member servers, I can.
>
> I really need console access as they are in different
> offices.
>
> Can anyone shed any light on this?
>
> Thanks
>
> John

I use the following Command Line:

mstsc /v:servername /console

I have found that this works on all of my member servers,
but none of my DC's.

When it fails to work, there is no error and I am
connected to a session, just not the console.

I looked into it further and it appears that on the member
servers, there is a security group [Remote Desktop Users]
that is populated from the "Select Remote Users" button on
the remote tab in the system properties.

Obviously, in a DC, The SAM no longer exists.

There is no such group in the active directory.

>-----Original Message-----
>I assume you are using the /console option?
>What error message do you get? Anything in the EventLog?
Have you
>checked Logon Locally permissions (in the Default Domain
Controller
>Security Policy)?
>
> --
>Vera Noest
>MCSE, CCEA, Microsoft MVP - Terminal Server
>http://hem.fyristorg.com/vera/IT
> --- please respond in newsgroup ---
>
>"Johnny Boy" <(E-Mail Removed)> wrote
in
>news:2fa601c3d92f$0adad630$(E-Mail Removed):
>
>> I have several Windows 2003 servers. It appears that
on
>> the Domain controllers, I can't log into to the
console,
>> but on the member servers, I can.
>>
>> I really need console access as they are in different
>> offices.
>>
>> Can anyone shed any light on this?
>>
>> Thanks
>>
>> John
>.
>

Are you using a Domain Administrators account?

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---

"John" <(E-Mail Removed)> wrote in
news:07b901c3dc23$bb06d8a0$(E-Mail Removed):

> I use the following Command Line:
>
> mstsc /v:servername /console
>
> I have found that this works on all of my member servers,
> but none of my DC's.
>
> When it fails to work, there is no error and I am
> connected to a session, just not the console.
>
> I looked into it further and it appears that on the member
> servers, there is a security group [Remote Desktop Users]
> that is populated from the "Select Remote Users" button on
> the remote tab in the system properties.
>
> Obviously, in a DC, The SAM no longer exists.
>
> There is no such group in the active directory.
>
>>-----Original Message-----
>>I assume you are using the /console option?
>>What error message do you get? Anything in the EventLog?
> Have you
>>checked Logon Locally permissions (in the Default Domain
> Controller
>>Security Policy)?
>>
>> --
>>Vera Noest
>>MCSE, CCEA, Microsoft MVP - Terminal Server
>>http://hem.fyristorg.com/vera/IT
>> --- please respond in newsgroup ---
>>
>>"Johnny Boy" <(E-Mail Removed)> wrote
> in
>>news:2fa601c3d92f$0adad630$(E-Mail Removed):
>>
>>> I have several Windows 2003 servers. It appears that
> on
>>> the Domain controllers, I can't log into to the
> console,
>>> but on the member servers, I can.
>>>
>>> I really need console access as they are in different
>>> offices.
>>>
>>> Can anyone shed any light on this?
>>>
>>> Thanks
>>>
>>> John