Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Users can't login in a domain

Posted on 2008-06-24
7
Medium Priority
?
193 Views
Last Modified: 2013-11-21
Hi,

I have a Windows 2003 server that is a Domain Controller.
I'm sure Active Directory is well installed and configured.

But the domain users can't login. I get this message saying that I must allow login through Terminal Server right and if I add them to the Remote DEsktop Users Group, it should work.
So I did, but still they can't login.

Now, I went to Terminal Server Licensing and I have "No Terminal Server license server is available in the current domain or workgroup".
I click "Action -> Connect" and type the server IP, but I get the message saying "Windows cannot connect to a licensing server".

My server is not connected to the internet.

Is this what's preventing my domain users from logging in ?

If so, is there another way of letting them log in ?

Any help would be appreciated.

Warm Regards,
Mário Gamito
0
Comment
Question by:angelsofgrace2006
  • 4
  • 2
7 Comments
 
LVL 13

Expert Comment

by:haim96
ID: 21854187
are they tring to login to domain via terminal services or to regular client?
0
 

Author Comment

by:angelsofgrace2006
ID: 21854253
regular client.
I've already added the user to the Administrator Group and now I can login, but it's a situation I don't want to mantain.
0
 
LVL 13

Expert Comment

by:haim96
ID: 21854338
by default domian USERS not alowed to login to DC only admins.
you can change this via security GPO.
0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
LVL 13

Accepted Solution

by:
martin_babarik earned 2000 total points
ID: 21854404
To be more specific: open Group policy management console, edit Default Domain Controller Policy, expand Computer -> Windows -> Security -> Local settings -> User Right Assignment -> Allow log on locally -> Add here the users who should be able to logon to DC.
But I STRONGLY don't recommend to allow anyone else than admins to be allowed to logon to DC.
0
 
LVL 13

Expert Comment

by:haim96
ID: 21855452
:(

i belive my answer was helpful... so why?! why!? why not to split?! :(
0
 
LVL 13

Expert Comment

by:martin_babarik
ID: 21855801
Haim96: sorry if you feel neglected in this case, no problem for me to re-assign the points.
Maybe from the asker's point of view you identified the problem and provided very general solution, while I provided exact information that could be used to solve the issue.
Anyway you still participated on the problem, so as I say - no prob to re-split.
Regards
Martin
0
 
LVL 13

Expert Comment

by:haim96
ID: 21855888
never mind... i have no complains for you. you did great job!
but i'm not sure that you could give your answer without my answer (not from the start at list)
so since there is kind of dependence between the two answers the asker must consider
this when he give points...

i have seen this alot here and it's annoying me.

0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question