Solved

terminal services problem

Posted on 2011-03-22
5
752 Views
Last Modified: 2013-11-21
I need to setup a user account on my server to be able to logoff terminal services users when they have a problem with a disconnect. When I try the new account, I keep getting the following message.  "Session (ID 9) reset failed. (Error 5 - access is denied.) Is there some specific user right that I have to enable with this account to be able to do this? I have given it server rights and administrator rights and terminal services rights, already. It still doesn't work. Help!
0
Comment
Question by:trunnelli
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:nfmartins
ID: 35191155
Hi there,

Check this Microsoft Article:
http://technet.microsoft.com/en-us/library/cc753032(WS.10).aspx

Best Regards
NM
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35193193
By default, all members of the local administrators group on a TS have rights to log users off the server. But, those admin rights will NOT apply to any user sessions that were logged on BEFORE those rights were granted.  So, I think that might be why the one user can't log the other user off the system.

For example, let's say a user called Bob logged on last night at 9pm then he disconnects later instead of logging off.  This morning, Sally was made a member of the local admins group.  Sally sees Bob's disconnected session on the server and she wants to log him off, but she wouldn't be able to because her admin privileges weren't in effect at the time Bob first logged on the night before.

If you want to grant a non-admin user the rights to log users off the server, you'd have to grant them special rights using TS Configuration:
1.  Click on Start > All Programs > Administrative Tools
2.  Click on Terminal Services Configuration
3.  Double-click on the connection type (either RDP-TCP or ICA-TCP for citrix)
4.  Click on the Permissions tab
5.  add any users you need to add here
6.  Click on the Advanced button
7.  Click on the user or group name, then click on Edit to customize the user or group's rights in TSAdmin

To just log people off, users would only need to be granted "Logoff" rights.  That URL that NFMartins listed gives a good description of what the different permissions are.

Alicia
0
 

Accepted Solution

by:
trunnelli earned 0 total points
ID: 35282190
I solved it by making the user a domain admin. Not sure this is what I wanted but needed a fill-in for a week while I am out of the office. Will delete the accout on return.
0
 

Author Closing Comment

by:trunnelli
ID: 35321748
Would like this user to be able to do this job always, but don't want him/her to be a domain admin.
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35323361
You don't have to make the user a domain admin.  You can just make him a member of the local admins group on the TS to grant him rights to log users off of that TS.

Or, you could adjust the permissions in the Terminal Services Configuration console to grant non-admins rights to log users off as I described in my post above.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
server is not seen in network 12 83
Server 2012 R2 missing roles and features 2 160
question about running backups 3 83
Powershell permissions for remote computers 12 43
Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question