Terminal Services clients permissions

Okay, I have terminal services running on a W2k3 member server on my network.  I finally got the clients to connect okay, but I had to put their group they belong to in the local administrators group to get it to work.  When the clients logon to the TS session, they get the "configure your server" window, which tells me they have way too high of permissions.  I cannot get it to work any other way though.  I just want the TS clients to be able to run an application on the W2k3 member server through terminal services without giving them administrator privileges.  Is this possible?  And if so, can you give me a hint or two?

Thanks,
Cheese
cheesebugahAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SamuraiCrowCommented:
Take them out of the administrators group and put them into the remote desktop users group on the Terminal Server.  This is a change from 2000 terminal services.  
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SamuraiCrowCommented:
The administrators group is automatically a member of the remote desktop users group which is why they can connect by default.
0
cheesebugahAuthor Commented:
I had initially put them into the remote desktop user group to no avail?
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

SamuraiCrowCommented:
Interesting.  Do you have a licensing server set up?  I'm running three 2003 TS devices and the remote desktop users group is definately where non administrative users need to be placed for connectivity.  What is the particular error that comes up when they try to log in without being in the admin group?
0
cheesebugahAuthor Commented:
The W2k3 Server is the only W2k3 device on my network, so it is the license server also.  My network is W2k otherwise.  It has been a couple of weeks since I have done this, so I think the message was something like, Access denied, you do not have privileges to access this server.  It was something like that.  It was not the denial of local logon, it was something referencing permissions or privileges.  
0
SamuraiCrowCommented:
I've done a little testing and the default message of a user that can't log into the server is "The local policy of this system does not allow you to log on interactively".  At this point I would suggest the following:

1 Create a dummy account with no priveleges on the server and try to log in.  Document the results in this forum

2 Add the dummy account to the remote desktop users group and see if you get a different error message.  Again please post the results here

This will give us a clear picture of where the breakdown is occuring.
0
cheesebugahAuthor Commented:
I'm sorry I haven't had time recently to get back to this topic.  I will submit a comment soon, when I have the time to fiddle with this some more.  I greatly appreciate your patience.

Cheese
0
cheesebugahAuthor Commented:
I'm back!  I guess I'll restart with;  If I put the users into the remote desktop users group, when they log on to the TS, do they log on locally or to the domain?
0
cheesebugahAuthor Commented:
I have also had some issues with my Citrix server as of late in regards to licensing.  It appears to me that the licensing server has to be a DC.  The TS server of issue here is not a DC.  So, do I have to place the TS licenses on a DC and point the TS server to the license server?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.