[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 253
  • Last Modified:

2k3 remote login privlidges

Prior to switching over to Active directory I was able to add users to the "remote desktop users" group and that would allow them to remotly login into the machine (as the name implies).  

I switched over to AD and users that were previously able to login remotely still can, but when I create a new user and add them to that group it will not allow them to login, they get the error "the local policy does not allow you to login interactivly".

If I add users to the administrators group they CAN login remotly, but clearly I do not want users as admins.

Any help would be appreciated.

  • 2
1 Solution
You need to change the local user rights policy on the workstation

start- run- gpedit.msc

Computer Config- Windows Settings- Security Settings- local policies- user rights- log on locally (add the group you want to give them this right)
jhildenAuthor Commented:
Follow up: There is also a group called "local Remote Login Users", I try adding users to that group also but users are still unable to login.  Presently the test user I have is a member of:
-Domain Users
-Local Remote Login Users
-Remote Desktop Users

I realize that the best solution may be editing the group policy but I have never done and that if that is the case detailed instructions would really be appreciated.
jhildenAuthor Commented:
smile, thank you much.  In the group policy under:
Computer Configuration -> windows settings -> security settings -> local policies -> user rights assignment -> allow logon through terminal services.

The only group listed in their was administrators, I added remote desktop users and I was good to go!

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now