Solved

How to modify "Allow logon through Terminal Services" globally in Windows 2003 SBS

Posted on 2004-10-21
7,675 Views
Last Modified: 2013-12-04
Environment:
   Windows SBS 2003 domain controller,
   Windows XP Pro SP2 workstations.

Problem:
   I don't know how I did this, but I managed to mangle (i.e. change wrongly)  the security group associated with the "Allow logon through Terminal Services" right on all my XP workstations.  It can't be changed at a workstation -- it's grayed out.  Also, its icon is different from the rest of the local rights.  It shows an icon that looks like two computers with a scroll in the foreground.

Since the problem manifest on all workstations, I'm thinking the change was global, done somewhere on the Windows 2003 SBS server.  Problem is, I don't know where I changed it, and I'm not experienced enough yet regarding AD, GPOs, etc., to know where to look.  (Scanning ExpertsExchange hasn't helped, either, since most related answers relate to Windows 2000 Server, which apparently has a different way to edit group policies.)
What I *do* know is poking around in the Server Management program hasn't helped.  So I'm turning to you, the expert.

Question:
Where on my Windows SBS 2003 server do I manage the user rights assignment of my workstations' "Allow logon through Terminal Services" right?

500 points to the first correct caller.  Go!  (and thanks!!)
0
Question by:JohnAtkinson
    3 Comments
     
    LVL 3

    Accepted Solution

    by:
    go to Active Directory Users and Computers snap-in, choose your domain, go to properties,  group policy.
    Select your default policy and click to Edit. Then go to Computer configuration, Local policies, User rights assignment, select 'Allow log on  through terminal services' and edit.

    0
     

    Author Comment

    by:JohnAtkinson
    Thanks, farpost!
    0
     

    Expert Comment

    by:x3o
    now what if everything is grayed out and you cannot add anyone?
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone. Privacy Policy Terms of Use

    Featured Post

    Cisco Complete Network Certification Training

    If you’re an IT engineer or technician, it's time you take your career to the next level. This elite training bundle is brimming with all of the information you need to learn to sit for Cisco CNNA, CCNP, and CCENT certification exams.

    Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
    Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
    This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…

    877 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now