Remote Desktop not working

One of our XP users cannot seem to RDP into his own machine from another machine within the LAN. Remote access permission is set to "deny access" in his profile, as I understand that this is for connecting to the VPN from the outside and we don't want to allow this. But he can't RDP when he's inside the network. He has been added to the remote desktop user's group of his own machine, so what else could be the problem?
LVL 9
BobHavertyComhAsked:
Who is Participating?
 
Britt ThompsonSr. Systems EngineerCommented:
Oh...different story then. Sounds like there's a deny permission under his user account in the terminal services tab... see the image and make sure that checkbox is not checked in AD.
Picture-1.png
0
 
Britt ThompsonSr. Systems EngineerCommented:
Is the Windows Firewall allowing access to port 3389? Or, is there an additional software firewall on the machine?

Does the user have a password? A password is require to use RDP.
0
 
BobHavertyComhAuthor Commented:
Yes, the user is part of our Active Directory and has a password. Windows Firewall is allowing access to port 3389, and actually, we use a cisco router as our firewall and 3389 is open, and other people can successfully RDP into their machines from another machine
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
Britt ThompsonSr. Systems EngineerCommented:
I see that the user has been added to the remote desktop users group of his own machine but, stupid question, is RDP enabled on that machine?

Can you use the command line and:   telnet computername 3389  ?
0
 
BobHavertyComhAuthor Commented:
I did that on my own machine and I got a blinking cursor, so i guess I'm in and it's waiting for a telnet command. Should I have him do the same?
0
 
Britt ThompsonSr. Systems EngineerCommented:
that blinking cursor means it was successful. If his doesn't work then something is blocking the port and or RDP is not enabled. Or, the port number may have been changed in one way or another.

You can verify the port number here: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp\PortNumber
0
 
BobHavertyComhAuthor Commented:
When he tries to rdp into his machine from another machine on the LAN it says that his interactive privledges have been disabled, please contact system administrator
0
 
BobHavertyComhAuthor Commented:
Remote desktop is definitely enabled on his machine and his domain user name is definitely part of remote desktop users on his machine
0
 
BobHavertyComhAuthor Commented:
did telnet machinename 3389 and it failed on his machine and said it could not connect to the host
0
 
BobHavertyComhAuthor Commented:
ding ding ding. That's it. Thanks much
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.