Remote desktop users group gone
Posted on 2006-05-22
Added a new windows 2003 Server to Present Active Directory 2000 network using dcpromo as an additional domain controller, to replicate AD and existing security policies. This machine is strictly a Terminal server box. When I try to login to terminal server I get "to log on to this computer you must have terminal server user access permissions... add users to remote desktop users group". This group disappeared when I joined the 2000 AD. I created a new group called "terminal server users" added all my users to it, edited every security policy I could find and gave this group access to logon to terminal services under computer configuration\windows settings\security settings\local policies\user rights assignment. The only way I can connect is if I make my new group a member of the administrators group also. As soon as I remove admin rights from my group, I can't connect. I need for remote users to not be admins. I thought about makeing the server a member server, and hoping the group would come back, but I am leary of doing that as I have a lockdown policy for remote users on that machine.