Remote desktop users group gone

Posted on 2006-05-22
Last Modified: 2008-03-04

Added a new windows 2003 Server to Present Active Directory 2000 network using dcpromo as an additional domain controller, to replicate AD and existing security policies.  This machine is strictly a Terminal server box.  When I try to login to terminal server I get "to log on to this computer you must have terminal server user access permissions... add users to remote desktop users group".  This group disappeared when I joined the 2000 AD.  I created a new group called "terminal server users" added all my users to it, edited every security policy I could find and gave this group access to logon to terminal services under computer configuration\windows settings\security settings\local policies\user rights assignment.  The only way I can connect is if I make my new group a member of the administrators group also.  As soon as I remove admin rights from my group, I can't connect.  I need for remote users to not be admins.  I thought about makeing the server a member server, and hoping the group would come back, but I am leary of doing that as I have a lockdown policy for remote users on that machine.

Question by:philoscr
    LVL 48

    Accepted Solution

    Hi philoscr,

    have you check your actual RDP-TCP settings under the terminals services manager

    Author Comment

    I went to terminal services configuration, connections, then properties of RDP-TCP.  I clicked the permissions tab, and added my terminal server users group and it worked.  Wouldn't have thought to look there, I thought thats what the policy was for, have to do tell windows more than once for it to actually obey.
    That was to easy, thanks!
    LVL 48

    Expert Comment

    no worries

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    Learn about cloud computing and its benefits for small business owners.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now