Windows 2003 remote desktop errors

[Lonnie]

I have just installed a Windows2003 Enterprise server in a Windows2000
Domain. The domain has a one way trust with my corporate domain.I know
my trust is working and I can remote desktop into all my Windows 2000
boxes (using terminal services administration mode) using credentials
from the corporate domain (the drop down box in the "log on to:"
screen allows me to select the corporate domain) and I can also log
onto the Windows 2003 box using credentials from the corporate domain
when I am at the console. Here is where the problem starts. The
windows2003 server will not allow me to log on via Remote Desktop
using credentials from the corporate domain, only the console. The
corporate domain appears in the "log on to:" box, but I get the
following logon error when logging on.

The system cannot log you on due to the following error: The specified
domain either does not exist or cannot be contacted.

and the following errors in order appear in the event log

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 10/27/2004
Time: 3:48:35 PM
User: corporate\lpaschall
Computer: APP1A
Description:
Successful Logon:
User Name: lpaschall
Domain: CORPORATE
Logon ID: (0x0,0x1F5A0F1E)
Logon Type: 10
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: APP1A
Logon GUID: -
Caller User Name: APP1A$
Caller Domain: CA
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 2208
Transited Services: -
Source Network Address: 10.1.2.54
Source Port: 4353


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 10/27/2004
Time: 3:48:35 PM
User: CORPORATE\lpaschall
Computer: APP1A
Description:
Special privileges assigned to new logon:
User Name: lpaschall
Domain: CORPORATE
Logon ID: (0x0,0x1F5A0F1E)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Winlogon
Event Category: None
Event ID: 1219
Date: 10/27/2004
Time: 3:48:40 PM
User: N/A
Computer: APP1A
Description:
Logon rejected for CORPORATE\lpaschall. Unable to obtain Terminal
Server User Configuration. Error: The specified domain either does not
exist or could not be contacted.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 4b 05 00 00 K...


Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 10/27/2004
Time: 3:48:42 PM
User: CORPORATE\lpaschall
Computer: APP1A
Description:
User Logoff:
User Name: lpaschall
Domain: CORPORATE
Logon ID: (0x0,0x1F5A0F1E)
Logon Type: 10


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[JM]

Hi Lonnie,
I am also getting the same error.It works if i add the user to the
administrator group.
But thats a security breach and I cant add them.As per the book, adding to
remote desktop users group should work fine, but it doesnt.

 

[Vera Noest [MVP]]

Check the path to and permissions on your TS-specific profile.

 

[Lonnie]

Thanks Jim but that will not work for me. I have a one way trust, so I
cannot add the trusted domain to the local adminstrators group.

Lonnie