Link to home
Start Free TrialLog in
Avatar of LeoHarris82
LeoHarris82

asked on

Terminal Server User Access permissions in Citrix

I'm having a problem with my new citrix server.  I am getting an error message that I must be part of the remote desktop users group which I thought I. Then I realize that win2k doesn't have a Remote Desktop Users group as a builtin account.   I'm using a DC as the licensing server. I thought there was a problem with the Terminal Server Licensing, but I don't know since I can log in through an ICA connection.  It's just my application set that does this.  This is the exact message:

"To log on to this remote computer, you must have Terminal Server User Access permissions on this computer.  By default, members of the Remote Desktop Users group have these permissions.  If you are not a memeber of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."

Here is what I have tried already:

1) Made sure I had the correct permissions to the RDP connection.
2) Made sure that Citrix Connection Configuration>RDP>Properties>Advanced had "only run Published Applications"  unchecked.
3) Tried to create a new licensing server.
4) Other things that I can't remember.

I'm not a pro or an expert at Citrix right now, so I had to talk to the guys/girls that are.  Hopefully you can help.  Thanks in advance.
Avatar of LeoHarris82
LeoHarris82

ASKER

***Update***  I cannot log in through an ICA connection.  I had made the mistake of logging on the the old citrix server that we had.  Creating a custom ICA connection produces the same thing.
Few things. First I believe you need to add Domain users and Domain admins to the local Users group on each citrix server. Also, make sure you are not running citrix off of your domain controller. Have you tired logging in with the Administrators account? That account should have the rights to do it.
The problem is underlying rights, not associated with the connection (which is why you see it both from RDP and ICA connections - both are relying on the underlying Terminal Services permissions). Either by group membership or by specific user attributes, you need to ensure that the userids who will be logging have Terminal Server User Access permissions. If you are logging in with domain userids, verify those userids (or a group they belong to) have TS permissions.
Hello Guys,

Thanks for your responses.  The problem turned out to be a liscensing issue and we had to renew it after 120 days.  Our network administrator acquire those and took care of the problem right away.  Thanks anyway.
ASKER CERTIFIED SOLUTION
Avatar of Computer101
Computer101
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial