Link to home
Start Free TrialLog in
Avatar of akashchopra
akashchopra

asked on

2003 Server Remote Desktop Access Problem

I'm trying to allow a user to use remote desktop to access the server, but they keep getting the message "The local policy of this system does not permit you to logon interactively". This user is not trying to logon as administrator.

I've found articles that mention going to the Remote tab on Control Panel/System, and clicking on "Select Remote Users", but this button is disabled.

All help greatly appreciated.
Akash
SOLUTION
Avatar of KerryG
KerryG

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
there are two modes of terminal server,,, application mode and administrative mode,,, which mode is your server in??
Avatar of KerryG
KerryG

If you read his original post, terminal server is obviously already running and more than likely in administrative mode based on the error he is getting. In this mode, only administrators are allowed to login unless you set the permissions for that user or group to log on locally.
Actually, you can remote desktop to any xp pro or better machine even if terminal services is not enabled.  Remote desktop is a separate function from terminal services.
jimmybartlett,
 That is not entirely true, you still have to go to the system control panel (my computer/properties), go to the remote tab and enable it. Uses have to have passwords in order for it to work as well.
That's not called Terminal Services. That's called Remote Desktop. Two different services, controlled in two different places, but using the same protocol to connect.
I am quite aware of that but you still need to enable it properly unlike your statement which implies it is automatic.
"Actually, you can remote desktop to any xp pro or better machine even if terminal services is not enabled.  Remote desktop is a separate function from terminal services."
My exact statement. No implication of automatic ability. Just stating that Terminal Services doesn't need to be turned on. But we digress. Akash, have you tried anything yet?
~Jimmy
Avatar of akashchopra

ASKER

Ok, I've tried installing Terminal Services, but it seems like I'll need to spend some time reading up on it before I can get it configured. I've given the users terminal services permissions using the Terminal Services Config Tool, but they can't run the application because they have been denied access to the C: drive. It all seems like a complicated way of achieving something simple! Plus I'll need to get it licenced after the 120 day grace period.

All I really want is to allow certain users access to a particular application installed on the server. Remote Desktop seemed to be a reasonable way to achieve this, but I can't seem to find out how to give the users the necessary permissions. Currently only Administrators can Remote Desktop onto the server, but obviously I'd rather not give these users Administrator rights.

You should have them connect to your server with TSWeb. It's an activex control that works through IE. All they have to do is visit the web page of the server and login. the activex control takes it from there. They don't need access to the mstsc.exe application on the C: drive. add/remove windows components -> select Internet Information Services and click details -> select World Wide Web Service and click details -> Check the Remote Desktop Web Connection. (you will have to set up IIS to get this working properly) I have the client set to connect when someone types in http://myserver.mydomain.com/tsweb. they can then select their screen resolution etc.
Hmm, I'm not keen on installing IIS on the server (I want to keep all web traffic away from the server), but I may have to end up going down that route.

Thanks for the tips - I'm going to split the points for the two suggestions that have got me part way to a solution.
Thanks! Actually, web traffic doesn't go up unless you design a site on the machine. I've been running IIS on my XP Pro box just so i can access it remotely from non-xp machines, and never have I had a visitor that wasn't myself. Just don't advertise the server, don't put any content on the default page, and your web traffic should be zero.