Terminal Services <> Can't login interactive?!?!

J

Johan Ryberg

Hi,

Running W2k server I login with terminal services as administrator but not
as a user. How do I give the user I want to access the server correct
rights???

Best Regards Johan Ryberg
 
R

Robert L [MS-MVP]

this may help quoted from http://www25.brinkster.com/ChicagoTech
"The local policy of this system does not permit you to logon
interactively."
Symptoms: When trying to connect to a W2K domain controller running Terminal
Services with Application Server mode for user access, you as a TS user may
receive "The local policy of this system does not permit you to logon
interactively" message. You may not receive this message if you logon with a
member of the following default groups:
a.. Account Operators
b.. Administrators
c.. Backup Operators
d.. Print Operators
e.. Server Operators
f.. Others based on services on the computer such as TsInternetUser
Also, you will not receive this message when you logon member and
stand-alone servers since they have the users group included in the "Log on
Locally" user right.

Resolutions:This issue occurs because the W2K domain controller running
Terminal Services does not have the Users, Authenticated Users, or Everyone
global group added to the Group Policy Object for the "Log on Locally" user
right. "Log on Locally" is a required user right in Microsoft Windows NT
4.0, Terminal Server Edition and Windows 2000 Terminal Services. To modify
the Group Policy Object for the domain controller, go to Administrative
Tools>Domain Controller Security Policy>Security Settings>Local
Policies>User Rights Assignment>Policy>Log on Locally>Add>Browse, click the
appropriate group, and then click Add. After modifying the Group Policy,
type secedit /refreshpolicy machine_policy /enforce at a command prompt,
press ENTER, and then press ENTER.
For more and other information, go to
http://www25.brinkster.com/ChicagoTech

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Windows & Network Support, Tips and FAQs on
http://www25.brinkster.com/ChicagoTech
This posting is provided "AS IS" with no warranties.
 
J

Johan Ryberg

Thanks!!

Best Regards Johan Ryberg


Robert L said:
this may help quoted from http://www25.brinkster.com/ChicagoTech
"The local policy of this system does not permit you to logon
interactively."
Symptoms: When trying to connect to a W2K domain controller running Terminal
Services with Application Server mode for user access, you as a TS user may
receive "The local policy of this system does not permit you to logon
interactively" message. You may not receive this message if you logon with a
member of the following default groups:
a.. Account Operators
b.. Administrators
c.. Backup Operators
d.. Print Operators
e.. Server Operators
f.. Others based on services on the computer such as TsInternetUser
Also, you will not receive this message when you logon member and
stand-alone servers since they have the users group included in the "Log on
Locally" user right.

Resolutions:This issue occurs because the W2K domain controller running
Terminal Services does not have the Users, Authenticated Users, or Everyone
global group added to the Group Policy Object for the "Log on Locally" user
right. "Log on Locally" is a required user right in Microsoft Windows NT
4.0, Terminal Server Edition and Windows 2000 Terminal Services. To modify
the Group Policy Object for the domain controller, go to Administrative
Tools>Domain Controller Security Policy>Security Settings>Local
Policies>User Rights Assignment>Policy>Log on Locally>Add>Browse, click the
appropriate group, and then click Add. After modifying the Group Policy,
type secedit /refreshpolicy machine_policy /enforce at a command prompt,
press ENTER, and then press ENTER.
For more and other information, go to
http://www25.brinkster.com/ChicagoTech

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Windows & Network Support, Tips and FAQs on
http://www25.brinkster.com/ChicagoTech
This posting is provided "AS IS" with no warranties.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top