Solved

Local Users and Groups does not show up in Computer Management on 2003 Server

Posted on 2008-06-23
11
2,847 Views
Last Modified: 2008-11-22
Hello, I have a Win 2k3 Domain controller that also runs Terminal Services (small biz with ony one server NON SBS)

I tried to remote in as administrator via RDP and got a permissions error.  When I went to look at the remote desktop users local group, I couldn't get into Local Users and Groups in computer management.  It wasn't there at all.  

How do I get in there to check if Administrator has access to RDP?

Why isn't it there, and what should I do?

Thanks in advance!
0
Comment
Question by:dempsedm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
11 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 168 total points
ID: 21849788
There is no local users and groups on a domain controller.  You have to use the domain-level users and groups to set permissions for a domain controller.
0
 
LVL 32

Assisted Solution

by:r-k
r-k earned 166 total points
ID: 21851047
To put it another way:

 Start -> Administrative Tools -> Active Directory Users and Computers
0
 
LVL 4

Author Comment

by:dempsedm
ID: 21852149
So where did I add users for local RDP access?
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 166 total points
ID: 21853493
You add them from the domain. This is one reason why MS recommend that Terminal Services is NEVER installed on a domain controller.
0
 
LVL 4

Author Comment

by:dempsedm
ID: 21869727
Ok, cool.  Yes, I know about the TS not on DC recommendation.  This is a 5 user shop, and the application they were setting up has to run on a TS.  It wasn't in the budget for doing SBS + TS or similar.  

I will take a look next time I go there at the AD users and groups.  
0
 
LVL 70

Expert Comment

by:KCTS
ID: 21870327
If you are using SBS then not only is terminal Server on the DC not recommened but you can't physically install it on an SBS machine
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 21875003
Seconding KCTS's post - you did not mention before that you were using SBS, but KCTS is correct.  You cannot install TS in application mode on a SBS machine; the SBS licensing includes only 2 terminal server CALS and they can be used in remote administration mode only.
0
 
LVL 4

Author Comment

by:dempsedm
ID: 21875426
Hello, I have a Win 2k3 Domain controller that also runs Terminal Services (small biz with ony one server NON SBS)...
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 21875522
OK - I think maybe your reference to SBS in that post was a little confusing.  If you do NOT have SBS on this server, but standard Windows 2003 Server, then you should be OK.  Don't forget that you need to purchase TS CALs for users who will be logging on to the terminal server.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question