Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 321
  • Last Modified:

Terminal Server Access

I created a new user to access our terminal server and i gave all the same access which other terminal server users have. They all are under Remote desktop users group. But only this particular new user i created having problems log in into the terminal server, when i use this user name i get this error message

  "To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are no a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."

How can i resolve this?
0
moeshakir
Asked:
moeshakir
  • 3
  • 3
1 Solution
 
JunglegunCommented:
Check the users "Terminal Services Profile" in Active Directory. Make sure "allow logon to terminal server" is selected.
0
 
snusgubbenCommented:
Also check terminal services configuration (start > run > tscc.msc or was it TSConfig.msc in 2008...? > security) that your user is listed here (or the remote desktop users group)


SG
0
 
moeshakirAuthor Commented:
i dont see this option "allow logon to terminal server" uner the terminal services tab on active directory.

the box says " deny this user to terminal server" is un checked though.
0
Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

 
moeshakirAuthor Commented:
Thank you so much, you answer was great!!
I have a quick question for you, is there a way i can restrict a user on the terminal server? such as what he can access and what he cant?
0
 
snusgubbenCommented:
If you tick the "deny this user terminal server" he will not be able to log on to any TS in your domain.

When a user is in the Remote Desktop Group he will get ordinary "user access" to the TS. When you say restrict a user, what do you want him not to do?


SG
0
 
moeshakirAuthor Commented:
I only want him to access one particular software, i dont want him to go through the c drive etc.
0
 
snusgubbenCommented:
Citrix is superior when it comes to these limitations, but is offcours expensive.

In server 2003 your question is impossible. You can lock the user down with different GPOs (hide c-drive etc. but that's a bad idea). I'm pretty new to server 2008 so I can't say for sure, but I guess it will be difficult. I have seen Server 2008 "Publish Application" but I have not yet study it, so I can say if that's the solution.


SG
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now