[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 240
  • Last Modified:

Terminal Services on Windows Server 2003 - Is this all I need to do?

I have a windows 2003 server running Terminal server and it is just in the domain... not a DC. I have another server as the DC. I have the license server running on the windows 2003 server/terminal server and the license software says its activated and registered.

My questions relates to my manual entry of adding the users I wish to grant remote access to. All I did was access the computer management on the terminal server and add the appropriate people from the domain to the group remote desktop users.

I did not go to the DC and modify the local group policy to allow terminal server users to log on locally.

I tested all the logins and everyone can log into the terminal server with no issue. Am I not doing enough... why make that group policy change if you don't need to... I am a little confused as to what benifit that affords me in my current setup.

Or is this to allow users to login if the terminal server is a DC?

1 Solution
You only need this if you're running Terminal Services on a DC. By default, users are allowed to logon locally to member servers of a domain, but not to domain controller; that's why you have to add this permission if you're running TS on a DC (which isn't really recommended anyway).
So you're okay.

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now