Remote Desktop

[scroto]

I'm trying to connect to my 2003 DC using remote desktop. I can
connect using my administrative account and any account I add to
domain admins but no others. I've added "domain users" to the "remote
desktop users group" but still can't login to the DC over remote
desktop. I've added the "domain users group" to the remote desktop
users under system properties but still no go. Any suggestions??

 

[Tomasz Onyszko]

I'm trying to connect to my 2003 DC using remote desktop. I can
connect using my administrative account and any account I add to
domain admins but no others. I've added "domain users" to the "remote
desktop users group" but still can't login to the DC over remote
desktop. I've added the "domain users group" to the remote desktop
users under system properties but still no go. Any suggestions??

In which mode are Your TS running ?? Administration or App ?
Change the mode of TS or chang permissions on the RDP protocol through
TS admin cosole

 

[Marin Marinov]

<snip>
Since you connect to a DC all users except Domain Admins (and a few
others) don't have the "Allow log on locally" user right. Grant Remote
Desktop Users this right via Default Domain Controller Policy\Computer
configuration\Windows Settings\Security settings\Local policies\User
rights assignment. It's not a security best practice though. It Win2K3
there is a separate user right for TS logon but here you have just the
log on locally.

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[scroto]

Tomasz,

Thanks for the information. I've added Remote Desktop Users to the
permissions on RDP and it works great. Thank you very much.