Users cant login to Terminal Server

Posted on 2009-05-27
Medium Priority
Last Modified: 2013-11-21
I have setup a Windows 2008 Standard Server, Installed Terminal Services and a pack of TS CALs, and added the 'Groups of Users' who are allowed to login to the TS to the 'Remote Desktop Users Group'.

However when one of these users trys to login I get the following error; "To login to this remote computer, you must be granted the Allow logon through Terminal services right..."

What have I missed / how do I fix this?
Question by:Kiwi-User

Accepted Solution

RemcovC earned 2000 total points
ID: 24490178
Hi Kiwi-User,

You should check if the Remote Desktop Users group actually has this right.
On the Terminal Server start: Local Security Policy
Brouws to: Security Settings -> Local Policies -> User Rights Assignment
Find the "Allow log on through Terminal Services" and check of the Group is assigned to it.

The default "Remote Desktop Users" group found here is a local group on the terminal server, check groupmembership of this group (local on the Terminal Server)

Good luck,


Author Closing Comment

ID: 31586114
That fixed it, only the Administrators group was added to "Allow log on through Terminal Services", I added my TS USer Groups and everything is going well.


Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question