Remote Desktop Connection

[Danny C.]

I'm trying to get up to speed on Windows Server 2003 and Active
Directory. I've set up a server and I have a laptop running WinXP Pro.
I'm trying to establish a remote desktop connection from the laptop to
the server. I have set Group Policy to allow remote connections and put the
user in Remote Desktop Users group and Print Operators to give them local
login rights. The probem is I can't connect. If I put the user account in
Administrators group it connects right up. What am I missing?

Danny

 

[Robert L. \(MS-MVP\)]

Do you receive this message: "The local policy of this system does not
permit you to logon interactively? By design, only DC administrators are
allow to access DC using RDC. You may want to add the user to logon locally.
This search result may help.

Troubleshooting terminal server issues
"The local policy of this system does not permit you to logon
interactively." Symptoms: When trying to connect to a W2K domain controller
running Terminal ...
www.chicagotech.net/troubleshootingts.htm


--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

 

[Danny C.]

This is exactly what I get but they have local login rights as a member
of Print Operators group. They are also in Remote Desktop Users which by
default has rights to login remotely.

 

[Danny C.]

Is it the fact that it's a DC that only Administrator can connect
remotely? Is there a way to get around this?

 

[Robert L. \(MS-MVP\)]

In some case, adding the user to Print Operators group is not good enough.
Go to the Administrative Tools>Domain Controller Security Policy>Security
Settings>Local Policies>User Rights Assignment>Policy>Log on Locally, check
which users are listed. Please post back in this newsgroup.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

 

[Danny C.]

In User Rights Assignment it lists the following: Administrators, Backup
Operators, Account Operators, Server Operators, Print Operators.

And like I said the account is a member of Print Operators. Is it possible
that DC don't allow anyone but Admins to connect remotely?

 

[Christopher Perkins]

Hello Danny C,
May I suggest to you downloading logmein.com onto your remote computer. If
you go there and sign up for a account you can download the software onto
the computer that you want to control and then you can take control of your
computer from your web browser. I use it and i love it.
https://secure.logmein.com/home.asp?lang=en. Let me know what you do.

Christopher M. Perkins
(e-mail address removed)