interactive login

[Anthony Schnellbach]

I now have my TS web interface up and running. I created a new group and
gave them "log on localy" rights at the domain level. I can not log on as
anyone but the amin. ???

TIA
--Tony

 

[Vera Noest [MVP]]

Which error message do you get? Is there anything in the EventLog?
Have you checked the permissions on the rdp-tcp connection? Is the
server installed in Application server mode or Remote Administration
mode?

 

[Anthony Schnellbach]

I get the "The local policy of this system does not permit you to log on
interactively" .
TS is installed in Remote Admin mode.
There is nothing in the event log.
I gave my group ability to log in locally. I can not do that either..

TIA --Tony

 

[Anthony Schnellbach]

Got that.. Thanks
My test user can now log on locally and via TS.
One more question. He can not shut down the server locally but he can via
TS. Is there a way to remove this right?

TIA
--Tony

 

[Vera Noest [MVP]]

Note: if you don't take away the "Shutdown" option from the Start menu by a
Group Policy, then normal users will *see* the option, but will not be able
to actually perform a shutdown.
If your users *can* shutdown the server, then they are administrators or at
least Power Users. You *don't* want to have that on a normal TS, let alone
on a TS that is installed on a DC.

--
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*

 

[Anthony Schnellbach]

So what would give them the right to shut down the server interactively but
not locally??