Unable to edit the Log on Through terminal services local policy setting

Hi all,
Windows Server 2003 R2 Terminal Services
SBS Server 2003 Standard PDC

Customer is having trouble trying to log in to the Terminal server using the domain admin account.
When opening gpedit.msc >>COmputer configuration >> Windows Settings>> Security Settings >> Local policy>> User rights assignment>> Allow log on through Terminal Services AND Allow log on locally

Both policies above can not be edited and the Add user or group button is greyed out.
Again we are logged in using the domain administrator account so i wonder where to start?

Appreciate your help.


To log on this remote computer, you must be granted the Allow log on through Terminal Services right.  By default, members of the Remote Desktop Users group have this right.  If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User Group does not have this right, you must be granted this right manually

Open in new window

Who is Participating?
PopeyediceclayConnect With a Mentor Commented:
Probably because it's being applied at the domain level.  Open the Active Directory Users and Computers mmc and right-click the Domain Controllers OU and select Properties, change to the Group Policy tab and see if you can edit the policy that way.
See if the policy is set in the default domain controllers policy.
Yeah, what Darylx said!
vitsolutionsAuthor Commented:
Thank you, i discovered this was controlle by a policy at the root of the domain level.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.