MSAIT
asked on
Remote Desktop access not allowed
When I try to log on to a win 2003 Server via remote desktop it gives the following Logon Message:
TO log on to this remote computer, you must be granted the Allow log on through Terminal Services Right. By default members of the Remote Desktop Users group have this right. If you are not a member of this group you must be granted this right manually.
I can logon with my own username and pasword fine but I am member of Domain admins. When you try and log on with another standard user then it gives this message above. I did add the user to the local admin group on the server as well as the Remote Desktop users group but it still does not allow me in with that user.
PLease assist me urgently.
TO log on to this remote computer, you must be granted the Allow log on through Terminal Services Right. By default members of the Remote Desktop Users group have this right. If you are not a member of this group you must be granted this right manually.
I can logon with my own username and pasword fine but I am member of Domain admins. When you try and log on with another standard user then it gives this message above. I did add the user to the local admin group on the server as well as the Remote Desktop users group but it still does not allow me in with that user.
PLease assist me urgently.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Guys
Found the problem our System Administrator sorted it out for me, should have asked him in the first place
In your default domain policy under Computer Configuration - Windows Settings - Security Settings - Local Policies - User Rights Assignment, is a policy named "Allow log on through Terminal Services" Just add the user there. You can also make sure the Remote Desktop Users" group is added, makes it easier to manage
The "Remote Desktop Users" Group can be located in Active Directory under the Buildin OU
According to our System Administrator, He only added Administrator and our IT group to have Access for security reasons.
Found the problem our System Administrator sorted it out for me, should have asked him in the first place
In your default domain policy under Computer Configuration - Windows Settings - Security Settings - Local Policies - User Rights Assignment, is a policy named "Allow log on through Terminal Services" Just add the user there. You can also make sure the Remote Desktop Users" group is added, makes it easier to manage
The "Remote Desktop Users" Group can be located in Active Directory under the Buildin OU
According to our System Administrator, He only added Administrator and our IT group to have Access for security reasons.
ASKER
Thats after he deleted the group policies by accident which caused the prob in the first place! Scheister!
ASKER