Solved

terminal services problem

Posted on 2011-03-22
5
749 Views
Last Modified: 2013-11-21
I need to setup a user account on my server to be able to logoff terminal services users when they have a problem with a disconnect. When I try the new account, I keep getting the following message.  "Session (ID 9) reset failed. (Error 5 - access is denied.) Is there some specific user right that I have to enable with this account to be able to do this? I have given it server rights and administrator rights and terminal services rights, already. It still doesn't work. Help!
0
Comment
Question by:trunnelli
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:nfmartins
ID: 35191155
Hi there,

Check this Microsoft Article:
http://technet.microsoft.com/en-us/library/cc753032(WS.10).aspx

Best Regards
NM
0
 
LVL 16

Expert Comment

by:Spike99
ID: 35193193
By default, all members of the local administrators group on a TS have rights to log users off the server. But, those admin rights will NOT apply to any user sessions that were logged on BEFORE those rights were granted.  So, I think that might be why the one user can't log the other user off the system.

For example, let's say a user called Bob logged on last night at 9pm then he disconnects later instead of logging off.  This morning, Sally was made a member of the local admins group.  Sally sees Bob's disconnected session on the server and she wants to log him off, but she wouldn't be able to because her admin privileges weren't in effect at the time Bob first logged on the night before.

If you want to grant a non-admin user the rights to log users off the server, you'd have to grant them special rights using TS Configuration:
1.  Click on Start > All Programs > Administrative Tools
2.  Click on Terminal Services Configuration
3.  Double-click on the connection type (either RDP-TCP or ICA-TCP for citrix)
4.  Click on the Permissions tab
5.  add any users you need to add here
6.  Click on the Advanced button
7.  Click on the user or group name, then click on Edit to customize the user or group's rights in TSAdmin

To just log people off, users would only need to be granted "Logoff" rights.  That URL that NFMartins listed gives a good description of what the different permissions are.

Alicia
0
 

Accepted Solution

by:
trunnelli earned 0 total points
ID: 35282190
I solved it by making the user a domain admin. Not sure this is what I wanted but needed a fill-in for a week while I am out of the office. Will delete the accout on return.
0
 

Author Closing Comment

by:trunnelli
ID: 35321748
Would like this user to be able to do this job always, but don't want him/her to be a domain admin.
0
 
LVL 16

Expert Comment

by:Spike99
ID: 35323361
You don't have to make the user a domain admin.  You can just make him a member of the local admins group on the TS to grant him rights to log users off of that TS.

Or, you could adjust the permissions in the Terminal Services Configuration console to grant non-admins rights to log users off as I described in my post above.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cannot connect to configuration database - SBS 2011 company intranet 14 55
SBS 2011 Rollup 18 99
Weird Issues with AD GPOs 5 86
RDP up only between 8am-13.00 pm ? 11 76
The environment that this is running in is SCCM 2007 R2 running on a Windows 2008 R2 server. The PXE Distribution point is running on its own Windows 2008 R2 box. This is what Event viewer showed after trying to start the WDS service:  An erro…
Know what services you can and cannot, should and should not combine on your server.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now