Proper method to allow "user" to login to server 2003 via TS?

[Leythos]

I was trying to configure a local user (not admin or power user) with
the ability to log into the local server (2003) at both the console and
via TS for remote management. I don't want to give this user the ability
to do anything other than start/stop a service (MAS200) on the server
(it has a user interface that will let any user that can get the GUI to
start/stop it, no special permissions needed).

I though I was doing the right thing - created the user, added the user
to the Allow to log on locally (as well as the Administrator and
Administrators group, and power users...and others) and then went to
REMOTE ACCESS and added the user to the remote desktop users list...

Didn't work, and I screwed up the ability for me to log in as
Administrator (don't worry about that one, I'm fixing it now).

So, how can I get a generic user that ability to log into the local
server and also to use RD to access the server?

Thanks

 

[Tomasz Onyszko]

I was trying to configure a local user (not admin or power user) with
the ability to log into the local server (2003) at both the console and
via TS for remote management. I don't want to give this user the ability
to do anything other than start/stop a service (MAS200) on the server
(it has a user interface that will let any user that can get the GUI to
start/stop it, no special permissions needed).

I though I was doing the right thing - created the user, added the user
to the Allow to log on locally (as well as the Administrator and
Administrators group, and power users...and others) and then went to
REMOTE ACCESS and added the user to the remote desktop users list...

Didn't work, and I screwed up the ability for me to log in as
Administrator (don't worry about that one, I'm fixing it now).

Did You refresh the policy ? This Terminal Server is acting in remota
administration mode? Does this user have right Log on via Terminal
Server right (I can't remeber exact name and I don't have Windows 2003
with me but You can easily figure out which right it is)

 

[Leythos]

Did You refresh the policy ? This Terminal Server is acting in remota
administration mode? Does this user have right Log on via Terminal
Server right (I can't remeber exact name and I don't have Windows 2003
with me but You can easily figure out which right it is)

Yea, I did all of that, just like I would in 2000, but it didn't take.