• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 542
  • Last Modified:

Terminal Server User Access permissions in Citrix

I'm having a problem with my new citrix server.  I am getting an error message that I must be part of the remote desktop users group which I thought I. Then I realize that win2k doesn't have a Remote Desktop Users group as a builtin account.   I'm using a DC as the licensing server. I thought there was a problem with the Terminal Server Licensing, but I don't know since I can log in through an ICA connection.  It's just my application set that does this.  This is the exact message:

"To log on to this remote computer, you must have Terminal Server User Access permissions on this computer.  By default, members of the Remote Desktop Users group have these permissions.  If you are not a memeber of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."

Here is what I have tried already:

1) Made sure I had the correct permissions to the RDP connection.
2) Made sure that Citrix Connection Configuration>RDP>Properties>Advanced had "only run Published Applications"  unchecked.
3) Tried to create a new licensing server.
4) Other things that I can't remember.

I'm not a pro or an expert at Citrix right now, so I had to talk to the guys/girls that are.  Hopefully you can help.  Thanks in advance.
1 Solution
LeoHarris82Author Commented:
***Update***  I cannot log in through an ICA connection.  I had made the mistake of logging on the the old citrix server that we had.  Creating a custom ICA connection produces the same thing.
Few things. First I believe you need to add Domain users and Domain admins to the local Users group on each citrix server. Also, make sure you are not running citrix off of your domain controller. Have you tired logging in with the Administrators account? That account should have the rights to do it.
The problem is underlying rights, not associated with the connection (which is why you see it both from RDP and ICA connections - both are relying on the underlying Terminal Services permissions). Either by group membership or by specific user attributes, you need to ensure that the userids who will be logging have Terminal Server User Access permissions. If you are logging in with domain userids, verify those userids (or a group they belong to) have TS permissions.
LeoHarris82Author Commented:
Hello Guys,

Thanks for your responses.  The problem turned out to be a liscensing issue and we had to renew it after 120 days.  Our network administrator acquire those and took care of the problem right away.  Thanks anyway.
PAQed with points refunded (250)

EE Admin
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now