Link to home
Start Free TrialLog in
Avatar of Sp0cky
Sp0cky

asked on

"You must be granted the allow the logon through terminal services right." BUT I ALREADY AM ALLOWED!!??

W2k3 Domain.  On my primary domain controller, this is the error message I keep getting but I already have the right in domain ctrlr and domain security policy settings!!  I am also a member of the remote desktop users group!  What am I doing wrong??
Avatar of Toni Uranjek
Toni Uranjek
Flag of Slovenia image

Hi!

Check Default Domain Controllers Policy, Allow logon through Terminal Services right at Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment. Which groups or user accounts are defined in this policy?

HTH

Toni
Avatar of jbidtah
jbidtah

On the console of the PDC login as Admin
Start > run > type "tscc.msc" Hit ok
Click on the Connections in the left panel.
Double-click the RDP-Tcp (or Right-click and Select Properties)
Select the Permissions Tab
Add yourself to that list. and grant yourself the proper permissions.
Avatar of Sp0cky

ASKER

Hi Toni.  I am allowed in that policy as well.  Strangely,, I CAN remote into the 2nd DC but not the primary.
ASKER CERTIFIED SOLUTION
Avatar of Toni Uranjek
Toni Uranjek
Flag of Slovenia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
you have to be a member of the local RDP group on every machine you want to rdp too....the domain one doesnt cut it
Do you have the Terminal Services Lisencing installed?