Solved

New user can't log on to Terminal Server

Posted on 2007-11-16
2
1,070 Views
Last Modified: 2013-11-21
Hi,
I have created a new domain user on a v. small domain with just one server which is a DC and a TS. Some time back I set up one user to access TS. This works fine although I recall that I had a problem getting it to work initially - I wish I could remember how I resolved it as now I can't get a second user to log on.....
I have set up all the user settings in ADUC identically e.g. they are both members of the Remote Desktop group and neither are administrators, but i still get the error:
"To log on to this computer, you must be granted the Allow log on through Terminal Services right etc."
I can't think what else there is to do as the other user works fine.
Please help!
Cheers,
0
Comment
Question by:tangerine27
2 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 20297304
Assuming you're aware that letting users log on to your DC and using it as an application server isn't really recommended:
Create a group "DCTSUser" or whatever; add the users you want to be able to access the DC.
Start the Terminal Services Configuration MMC on the DC, open the properties of the RDP protocol, go to the Security tab, and allow User Access and Guest Access for the group you created.
Open the Domain Controller Security Policy, and add the group "DCTSUser" to the permission "Log on locally" (Security Settings\Local Policies\User Permissions).
The users should now be able to logon to your DC using RDP.
0
 

Accepted Solution

by:
tangerine27 earned 0 total points
ID: 21255091
This was a licensing issue......
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Learn about cloud computing and its benefits for small business owners.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now