2k3 remote login privlidges

Posted on 2004-11-29
Last Modified: 2010-04-19
Prior to switching over to Active directory I was able to add users to the "remote desktop users" group and that would allow them to remotly login into the machine (as the name implies).  

I switched over to AD and users that were previously able to login remotely still can, but when I create a new user and add them to that group it will not allow them to login, they get the error "the local policy does not allow you to login interactivly".

If I add users to the administrators group they CAN login remotly, but clearly I do not want users as admins.

Any help would be appreciated.

Question by:jhilden
    LVL 18

    Accepted Solution

    You need to change the local user rights policy on the workstation

    start- run- gpedit.msc

    Computer Config- Windows Settings- Security Settings- local policies- user rights- log on locally (add the group you want to give them this right)
    LVL 1

    Author Comment

    Follow up: There is also a group called "local Remote Login Users", I try adding users to that group also but users are still unable to login.  Presently the test user I have is a member of:
    -Domain Users
    -Local Remote Login Users
    -Remote Desktop Users

    I realize that the best solution may be editing the group policy but I have never done and that if that is the case detailed instructions would really be appreciated.
    LVL 1

    Author Comment

    smile, thank you much.  In the group policy under:
    Computer Configuration -> windows settings -> security settings -> local policies -> user rights assignment -> allow logon through terminal services.

    The only group listed in their was administrators, I added remote desktop users and I was good to go!

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now