Solved

Proper way to give user access to terminal server

Posted on 2006-06-23
5
266 Views
Last Modified: 2010-04-18
My first terminal server set-up I seem to remember putting using in security group i.e. TS_Users and adding that security group in Terminal Services Configuration > Connection > Properties > Permissions >  with Guest access. Last one I tried adding to  TS_Users (and individual users) to RDP Users Group in AD and that did not work, Adding TS_Users security group to TSConfiguration did not work as it did before. I ended up having to add each user individually to Terminal Services Configuration with Permissions.

I am now setting up another terminal server. What is proper way to grant users access?
0
Comment
Question by:AndykEE
  • 2
  • 2
5 Comments
 

Author Comment

by:AndykEE
ID: 16973571
PS this is DC in a single server domain, yes I know that is not recomended.
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 400 total points
ID: 16974645
we do exactly that in our small sites, single DC with TS, simply add the users to the RDP users group and also add the group under terminal services configuration, you may also need to check the local policy on the DC and make sure they are permitted to log in
0
 
LVL 9

Accepted Solution

by:
vsg375 earned 100 total points
ID: 16975074
Hi,

Jay has it right. Just make sure that these users have the "log on locally" permissions on this computer. That would mean allowing them to log on to a DC, but since they are "basic" users, they won't harm anything in your AD infrastructure.

HTH
Cheers
0
 

Author Comment

by:AndykEE
ID: 16978630
Where do I give permissions to log on locally? Is it Admin tools > Default Domain Controller Security Settings > Local Polocies > User Rights Assignment > All log on locally Properties > add users ?

Before post I had tried to do this in Group Policy Mgt > Default Domain Policy but was spooked by warning that if correct access rights where not given some things would not function right.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16978760
thats the correct policy - ignore that message, its just an additional security note
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now