Solved

terminal services problem

Posted on 2011-03-22
5
755 Views
Last Modified: 2013-11-21
I need to setup a user account on my server to be able to logoff terminal services users when they have a problem with a disconnect. When I try the new account, I keep getting the following message.  "Session (ID 9) reset failed. (Error 5 - access is denied.) Is there some specific user right that I have to enable with this account to be able to do this? I have given it server rights and administrator rights and terminal services rights, already. It still doesn't work. Help!
0
Comment
Question by:trunnelli
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:nfmartins
ID: 35191155
Hi there,

Check this Microsoft Article:
http://technet.microsoft.com/en-us/library/cc753032(WS.10).aspx

Best Regards
NM
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35193193
By default, all members of the local administrators group on a TS have rights to log users off the server. But, those admin rights will NOT apply to any user sessions that were logged on BEFORE those rights were granted.  So, I think that might be why the one user can't log the other user off the system.

For example, let's say a user called Bob logged on last night at 9pm then he disconnects later instead of logging off.  This morning, Sally was made a member of the local admins group.  Sally sees Bob's disconnected session on the server and she wants to log him off, but she wouldn't be able to because her admin privileges weren't in effect at the time Bob first logged on the night before.

If you want to grant a non-admin user the rights to log users off the server, you'd have to grant them special rights using TS Configuration:
1.  Click on Start > All Programs > Administrative Tools
2.  Click on Terminal Services Configuration
3.  Double-click on the connection type (either RDP-TCP or ICA-TCP for citrix)
4.  Click on the Permissions tab
5.  add any users you need to add here
6.  Click on the Advanced button
7.  Click on the user or group name, then click on Edit to customize the user or group's rights in TSAdmin

To just log people off, users would only need to be granted "Logoff" rights.  That URL that NFMartins listed gives a good description of what the different permissions are.

Alicia
0
 

Accepted Solution

by:
trunnelli earned 0 total points
ID: 35282190
I solved it by making the user a domain admin. Not sure this is what I wanted but needed a fill-in for a week while I am out of the office. Will delete the accout on return.
0
 

Author Closing Comment

by:trunnelli
ID: 35321748
Would like this user to be able to do this job always, but don't want him/her to be a domain admin.
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35323361
You don't have to make the user a domain admin.  You can just make him a member of the local admins group on the TS to grant him rights to log users off of that TS.

Or, you could adjust the permissions in the Terminal Services Configuration console to grant non-admins rights to log users off as I described in my post above.
0

Featured Post

Get HTML5 Certified

Want to be a web developer? You'll need to know HTML. Prepare for HTML5 certification by enrolling in July's Course of the Month! It's free for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Know what services you can and cannot, should and should not combine on your server.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question