• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 573
  • Last Modified:

How does a domain user RDP into a server?

We have quick books installed on a member server.  We need a user to remote into this server in order to access quick books from a remote office.  Their is a VPN setup and they can remote in but when they do, it states that they need to be part of the remote desktop groups.  How can we allow this user to remote in without having to give them admin access to this server to remote in?
0
maximus7569
Asked:
maximus7569
  • 3
  • 2
  • 2
  • +2
2 Solutions
 
xchangeCommented:
On the member server:
Right-click "My computer" | Manager
"Local Users and Groups"
add the user into the "remote desktop users" group.
0
 
Paul MacDonaldDirector, Information SystemsCommented:
On the member server, right-click on "My Computer" or go to Start -> Programs - > Administrative Tools and select "Manager your server"

In the Computer Management utility, select Local Users and Groups, then Groups.  On the right-hand side you'll see a list of local groups.  One is Remote Desktop Users.  Open that group and add the user's domain account to the group. That should do it.
0
 
maximus7569Author Commented:
Thanks guys that did the trick.  Now will that keep them from installing anything or making any changes?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Paul MacDonaldDirector, Information SystemsCommented:
Depends on what you mean.  Adding users to the Remote Desktop Users group gives them the ability to remote in, but doesn't necessarily give them elevated permissions on the machine.  Their local permissions will depend on who they log in as.  As such, if the user is just a User (as opposed to a Power User or Administrator or somesuch), then they can only do things users can do.
0
 
Sajid Shaik MSr. System AdminCommented:
the scenario seems to be very...

server by default can access only  2 sessions.

if u want to access more than 2 sessions u need terminal server ...

try this ... microsoft giving free access of 90 days terminal server license.

to install the terminal server see this article

http://wn.com/Windows_Server_2003__Terminal_Server_Installation

then the second option is publishin you application (quick books)  to terminal server to access remote users...
see this link.
http://wn.com/Terminal_server_configuration

there are lot of third party applications to publish your app to access remotely...

i.E   Citrix Xenapp   www.citrix.com

const effactive and good in performance   2x application server   www.2x.com
0
 
maximus7569Author Commented:
This is for server 2008, do you have links for that?
0
 
SteveCommented:
I agree with shaiksaj. This is a bit odd.

Unless you have terminal server licenses, the server is only able to perform RDP sessions for administration. You cannot properly prevent this user from making changes without issues.

Either install terminal server licenses or change you plan asap. users logging onto servers is always a bad plan.

If you are unsure, log in as the user and try to change something. If it lets you, they could potentially shut the server down, change config or completely screw it up.
0
 
maximus7569Author Commented:
Thanks guys!  I will setup terminal server.  Who gets the points?
0
 
SteveCommented:
It's up to you mate. choose which answer (or answers) helped you the most.

Glad you've come to a decision. Users logging into server is always a recipe for disaster....
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 3
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now