Solved

Terminal Server Remote Access Windows 2003

Posted on 2010-09-16
2
310 Views
Last Modified: 2012-06-27
I have a new domain that was setup. Everything is great except that I have to give users Domain Admin rights to logon to Terminal Services. I am not using group policy and the users have been added to the Remote Desktop Users group in Active Directory. I also made sure that the Remote USers group was added in group policy under User Right Assigment - Allow logon through Terminal Services. I am working on a 2003 Terminal Server and my Domain Controller is a different 2008 box.


My question is since I am not using Group Policy is there something else I need to do to make this work.
Do I need to enable this policy and if so how?

THANKS!!!
0
Comment
Question by:jseadrew
2 Comments
 
LVL 3

Accepted Solution

by:
woodmouse earned 500 total points
ID: 33694687
If you add your users to the "remote desktop users" group, and then go to the local policy of that server, to add the remote desktop users the allow logon locally - doesn't that help ?

In general I don't like users to have admin-rights :)
0
 

Author Closing Comment

by:jseadrew
ID: 33694736
Yes it does. I thougth of that about the same time I sent the email. I just added the group to the local policy and it works fine. Thanks!
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now