Terminal Server Access

Posted on 2009-03-31
Last Modified: 2013-11-21
I created a new user to access our terminal server and i gave all the same access which other terminal server users have. They all are under Remote desktop users group. But only this particular new user i created having problems log in into the terminal server, when i use this user name i get this error message

  "To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are no a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."

How can i resolve this?
Question by:moeshakir
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3

Expert Comment

ID: 24033292
Check the users "Terminal Services Profile" in Active Directory. Make sure "allow logon to terminal server" is selected.
LVL 21

Accepted Solution

snusgubben earned 500 total points
ID: 24033346
Also check terminal services configuration (start > run > tscc.msc or was it TSConfig.msc in 2008...? > security) that your user is listed here (or the remote desktop users group)


Author Comment

ID: 24033361
i dont see this option "allow logon to terminal server" uner the terminal services tab on active directory.

the box says " deny this user to terminal server" is un checked though.
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Closing Comment

ID: 31565044
Thank you so much, you answer was great!!
I have a quick question for you, is there a way i can restrict a user on the terminal server? such as what he can access and what he cant?
LVL 21

Expert Comment

ID: 24033479
If you tick the "deny this user terminal server" he will not be able to log on to any TS in your domain.

When a user is in the Remote Desktop Group he will get ordinary "user access" to the TS. When you say restrict a user, what do you want him not to do?


Author Comment

ID: 24033502
I only want him to access one particular software, i dont want him to go through the c drive etc.
LVL 21

Expert Comment

ID: 24033656
Citrix is superior when it comes to these limitations, but is offcours expensive.

In server 2003 your question is impossible. You can lock the user down with different GPOs (hide c-drive etc. but that's a bad idea). I'm pretty new to server 2008 so I can't say for sure, but I guess it will be difficult. I have seen Server 2008 "Publish Application" but I have not yet study it, so I can say if that's the solution.


Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Run Windows Server from USB 2 40
Exchange 2010 mailbox move 7 53
Blocking Microsoft Edge From Running? 14 60
Time server on domain 3 25
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question