Non-Administrator Operator loging under Terminal services Admin mo

[Guest]

I am trying to allow one of my users to administrate the printers on one of
my servers. I have setup terminal services (Windows 2000) in administrative
mode. I have added this person to the permissions for the RDP connection in
the Terminal Services Configuration console. However it will not allow that
user to log in because that user is not in the administrator group. It gives
the following error:"You do not have access to logon to this Session".

Is their a way to grant this user access to administer the printers only?"

 

[GeeB]

You'll also need to ensure the user or group they are a member of has the
'Logon locally' right in the Local or domain policy.

Example for local policy:
Start>Programs>Adminsitrative Tools>Local Security Policy>Local
Policies>User Rights Assignments>Logon locally

 

[Guest]

I had already done that. Thats when the message that said "The local policy
of this system does not permit you to logon interactively." went away and now
I get "You do not have access to logon to this Session." If I add this user
to the administrators group, it allows that user to logon.

 

[Patty Calcaterra]

SPdaddy,

I am assuming you are using Term Services in the "Remote
Administration" mode and not in the "Applications" mode. If that be
the case, then yes, this is a limitation to the licensing. You *will*
have to be an admin to use Terminal Services in this environment. for
more information, consult the following KB article....It explains how
to change the mode from Remote Admin to Applications...of course
assuming you have licenses to run it in "Applications" mode .

http://support.microsoft.com/default.aspx?scid=kb;en-us;306626

Regards,

Patty

 

[PooKitty]

my kitty sleeps on my router and i love chocolate

 

[Tom Che [MSFT]]

Hi,

Thanks for posting here. Also thanks all guys' kindly replies.

I agree with Patty, you may refer to the KB306626 to resolve your issue.

Since Application Server mode permits more than two simultaneous
connections by non-administrators, but requires the Terminal Services
Licensing service to be installed on a domain controller (for which you can
use any server in a workgroup environment), and a Terminal Services Client
Access License is also required for non-Windows 2000 Professional clients,
I also provide some references as below for your convenience:

For additional information about how to activate a license server, click
the article number below to view the article in the Microsoft Knowledge
Base:
How to Activate a Terminal Services License Server and Install CALs Over
the Internet
http://support.microsoft.com/kb/237811

For additional information about how to activate a license server, click
the following article number to view the article in the Microsoft Knowledge
Base:
How To Activate a License Server by Using Terminal Services Licensing in
Windows 2000
http://support.microsoft.com/kb/306622

For additional information about how to deactivate or reactivate a license
server, click the following article number to view the article in the
Microsoft Knowledge Base:
How To Deactivate or Reactivate a License Server Using Terminal Services
Licensing
http://support.microsoft.com/kb/306578

Hope this helps!

Have a nice day!

Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

 

[Joe Richards [MVP]]

Note that you can also use terminal server manager to modify the rdp connection
permissions to allow for a non-admin to log into an admin session.

That being said, I would look into what could be done with remote administration
before giving a non-admin user local interactive access to a server.