"You do not have access to logon to this session"

Posted on 2003-03-12
Medium Priority
Last Modified: 2011-08-18
I'm setting up a Citrix Server. When I logon as a user I receive the message, "You do not have access to logon to this session" when I logon as a local administator I do not get this message. I'm using a Windows 2000 server with SP2 and Citrix XPs. I already added the access permissions for ICA-TCP and RDP-TCP.

Any suggestions?
Question by:AnimatorTwo
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

ID: 8130307
Looks like you are trying to logon from the server console using a user id which did't have rights to do this. Try to logon into the Citrix server from a client pc using the Citrix client apps.
Hoppe this will help, Chris.

Author Comment

ID: 8133579
The user account I'm using has access to the server, I can logon with the user account on the Citrix Server itself. Puzzling.

Expert Comment

ID: 8142828
I bumped into this issue many times in my company. Many times, I have forgotten one thing. Here is your fix.

On Citrix server:

Doubleclick THE APPLICATION the user will be using
Click on the ACCOUNTS TAB
Add the USER ACCOUNTS you want to log on to use this app

Note: this is where you will restrict access for certain users.

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.


Author Comment

ID: 8142855
Thank you for your excellent suggestions. Here what the problem was, and when i think about it, it makes perfect sense:

When I installed Citrix on my Windows 2000 Server, I was logged in to my Windows NT 4.0 PDC. I reinstalled Citrix logged in locally and the problem was resolved.

Just to prove to myself that the problem truly was due to logging into the domain, I re-installed once again, logged into the domain and sure enough, I got the message "You do not have access to logon to this session" when I logged in as a user.

Expert Comment

ID: 9084871
There could be a local or domain policy that denies the parent OU of the Obj. trying to make a NETWORK and INTERACTIVE session with the specific machine, While granting local access.  Local access is console session, interactive (of couse network as well) would be RDP and I would imagine ICA.   I would look at you local and domain policies and make sure that the OUs have the required rights.  I haved used Citrix  since MF 2000, but ICA could only improve a little bit (that was actually a complitment, as I really like ICA) , but are you using the webstart client, java, w32?


Accepted Solution

CetusMOD earned 0 total points
ID: 10913488
PAQed, with points refunded (500)

Community Support Moderator

Expert Comment

ID: 13435030
Two things.  

1. Make sure your network has a terminal server licensing server with approiate licenses.

2.  Your domain user must have the right to log on locally if this is a pdc.

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question