New Server2003 setup with Term Serv.

[Guest]

I added my Users to the "Remote Desktop" Group but still receive message
"Local Policy of this system does not permit you to logon interactively"
i want to set-up Terminal services as an App server.
Only Administrators are able to logon but I do not want to add my Users to
this group.

any guidance appreciated

thx

 

[Mike D]

Vince go into the users account and check the box to enable them to log onto
the terminal server. If this does not work let me know via e-mail. I got
another idea.
Mike D

 

[Vera Noest [MVP]]

Is this Terminal Server a Domain Controller?
If it is, you will have to give the users the right to "Log On
Locally" in the Default Domain Controller Security Policy.

This is one of the reasons that it is not recommended to run TS as
an application server on a Domain Controller.

 

[Boomer]

Vera,
Thanks for helping with this. I have a similar situation. Terminal
Services Server is installed on a Windows 2003 DC ( I know that it's
not good practice to do this, but it's just for testing). This DC is
the only machine in the domain. No other servers or clients. Users
are added to the the Builtin Remote Desktop Users (RDU) group. Using
tscc, the permissions on RDP-tcp for RDU group has full control.
For Domain Controller policy settings "allow log on locally" and
"allow log on through terminal services" the RDU group is added.
gpudate /force was successful. So it seems that all the bases are
covered, but when a user attempts to log in, the message "You do not
have access to logon to this Session" is displayed. Among other
resources, I read Q246109, but no help as it only covers Win2000.
Any suggestions???

-Boomer

 

[Boomer]

Hey all,

I may have figured this out by using Vera's post from a different
thread.
Try using the latest RD client to connect. For example if connecting
from an XP machine use the RDC. It should work. While using the
W2000 RD, I was not able to get in, but using the RDC it worked.

Also, you ONLY need the following settings on a W2K3 DC running TSS:
to allow users to access the DC throught TS, in the DC policy add the
user to the remote desktop users (RDU) builtin group and allow perms
for RDU in the "allow log on through Terminal Services". Then in tscc
in the permissions tab, allow the RDU according to your needs.

Hope this helps.

-Boomer