• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 44563
  • Last Modified:

"You do not have access to logon to this session"

I'm setting up a Citrix Server. When I logon as a user I receive the message, "You do not have access to logon to this session" when I logon as a local administator I do not get this message. I'm using a Windows 2000 server with SP2 and Citrix XPs. I already added the access permissions for ICA-TCP and RDP-TCP.

Any suggestions?
1 Solution
Looks like you are trying to logon from the server console using a user id which did't have rights to do this. Try to logon into the Citrix server from a client pc using the Citrix client apps.
Hoppe this will help, Chris.
AnimatorTwoAuthor Commented:
The user account I'm using has access to the server, I can logon with the user account on the Citrix Server itself. Puzzling.
I bumped into this issue many times in my company. Many times, I have forgotten one thing. Here is your fix.

On Citrix server:

Doubleclick THE APPLICATION the user will be using
Click on the ACCOUNTS TAB
Add the USER ACCOUNTS you want to log on to use this app

Note: this is where you will restrict access for certain users.

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

AnimatorTwoAuthor Commented:
Thank you for your excellent suggestions. Here what the problem was, and when i think about it, it makes perfect sense:

When I installed Citrix on my Windows 2000 Server, I was logged in to my Windows NT 4.0 PDC. I reinstalled Citrix logged in locally and the problem was resolved.

Just to prove to myself that the problem truly was due to logging into the domain, I re-installed once again, logged into the domain and sure enough, I got the message "You do not have access to logon to this session" when I logged in as a user.
There could be a local or domain policy that denies the parent OU of the Obj. trying to make a NETWORK and INTERACTIVE session with the specific machine, While granting local access.  Local access is console session, interactive (of couse network as well) would be RDP and I would imagine ICA.   I would look at you local and domain policies and make sure that the OUs have the required rights.  I haved used Citrix  since MF 2000, but ICA could only improve a little bit (that was actually a complitment, as I really like ICA) , but are you using the webstart client, java, w32?

PAQed, with points refunded (500)

Community Support Moderator
Two things.  

1. Make sure your network has a terminal server licensing server with approiate licenses.

2.  Your domain user must have the right to log on locally if this is a pdc.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now