Connecting to a domain controller

  • Thread starter Thread starter Tomas Andersson
  • Start date Start date
T

Tomas Andersson

Hi,

I'm having problems connecting to a terminal server (Windows Server 2003)
without the user being a member of Administrators. Terminal Services
Licensing is installed and seems to work just fine. Users cannot connect if
they are only members of the Remote Desktop Users group. I've tried to add
the user to several different groups but the only time it works is when the
user is an administrator. This is a DC and it's the only server on the
network, since it is a small office network. Does anyone have a clue about
what I'm doing wrong here?

Regards,

Tomas Andersson
 
Tomas said:
I'm having problems connecting to a terminal server (Windows Server 2003)
without the user being a member of Administrators. Terminal Services
Licensing is installed and seems to work just fine. Users cannot connect if
they are only members of the Remote Desktop Users group. I've tried to add
the user to several different groups but the only time it works is when the
user is an administrator. This is a DC and it's the only server on the
Click to expand...

I think you have the problem here. Other users than administrators
cannot normally log on to a DC interactively.
network, since it is a small office network. Does anyone have a clue about
what I'm doing wrong here?
Click to expand...

To allow Domain Users group to log on, open Control Panel ->
Administrative Tools -> Default Domain Controller Security Settings ->
Local Policies -> User Rights Assignment. To the "Allow log on locally"
setting, add the group "Domain Users".
 
Hi,

Unfortunately, it seems like it doesn't matter what groups or users I add to
"Log on locally", they can still not log on. The only way it seems is to
have the specific application that the users are supposed to run setup to
run automatically, since I don't believe that any of the users in question
would know what rights they have, even if the are administrators ;-)

I will inform the company though, that if they want to increase security,
they would need to setup a specific server for terminal services.

Tomas
 
Back
Top