Solved

SBS 2008 will not accept RDP

Posted on 2011-03-21
6
703 Views
Last Modified: 2012-05-11
Successfully completed a migration over the weekend from Server 2003 Standard with Exchange 2003 to SBS 2008.

The problem I'm having is the only user that can RDP to the new SBS 2008 server is the 'administrator' account. Any new user I create in the Network Administrator role, it does not allow them to connect via RDP.

I have tried manually adding the new admin accounts to the Remote Desktop Users group and the Terminal Services group, with no results.

The error message I get is:
"To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. if you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Dekstop User does not have this right, you must be granted this right manually."
0
Comment
Question by:call_me_rick
6 Comments
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 35181255
Have you checked on your new 2008 server to accept RDP (i.e. tick the "Enable Remote Desktop on this computer" box under System Properties? :)
0
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 35181273
Ar but SBS won't accept RDP from non admin anyway. Maybe you need to put Network Admin into Administrators group.
0
 

Author Comment

by:call_me_rick
ID: 35181833
In SBS, the Network Administrator role automatically adds that user to the Domain Admins group...and I have verified manually that this is happening through AD Users & Computers.

Just for kicks, I did check the remote settings under system properties and Domain Admins is in the list of allowed users.

Again, the 'Administrator' user account CAN log in via RDP, but no other Domain Admins can.
0
 
LVL 57

Accepted Solution

by:
Cliff Galiher earned 250 total points
ID: 35184529
First guess is that a security template was applied to either the local security policy or to one of the domain group policies. Use RSoP to view what group policies are being applied for the DC and for the user attempting to log in. One of the security policies defines which users and groups are allowed to log in remotely as well as interactively (console) and if the defaults have been changed (as some of the high-security templates do) then they supercede the settings on the remote desktop tab of the computer properties.

-Cliff
0
 
LVL 6

Expert Comment

by:jaredr80
ID: 37475275
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now