Domain users can't connect to TS

[James Williams]

Hello,

I have setup a couple of user accounts for logging onto the Win2000 TS,
however I keep geting the following error when they try to connect: "The
local policy of this system does not permit you to logon interactively".

I have enable the user account to allow terminal server connection, what
else would cause this?
My server is configured as a domain controller as well as a Terminal server.
However I have setup the user accounts to only start a specific application.


Regards,


James

 

[Brock]

PSS ID Number: 285793
CAUSE
This issue may occur if the "Deny logon locally" policy is set on your
computer.

 

[James Williams]

This policy is not set.
Any other ideas?

PSS ID Number: 285793
CAUSE
This issue may occur if the "Deny logon locally" policy is set on your
computer.

 

[Guest]

If your TS is a DC you must alter the Default Domain Controllers Security Policy to allow this user to "Log on Locally", which is the main reason people don't recommend running TS on a DC.

Domain Controllers Require the "Log on Locally" Group Policy Object for Terminal Services Client Connection
http://support.microsoft.com/default.aspx?scid=kb;en-us;q24798

More how tos here
http://www.workthin.com/tshta.ht

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- James Williams wrote: ----

This policy is not set
Any other ideas

 

[Shiraz]

Exactly as Patrick mentions.

By default on DC only members of Admninistrators, Backup
Operators, Account Ops., Server Ops. & printer ops. are
allowed to logon locally. So now either add your user to
one of em or add the user you want to the Log on Locally
policy on the DC using the domain controller security
policy

-----Original Message-----
If your TS is a DC you must alter the Default Domain

Controllers Security Policy to allow this user to "Log on
Locally", which is the main reason people don't recommend
running TS on a DC.

Domain Controllers Require the "Log on Locally" Group

Policy Object for Terminal Services Client Connections