Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

terminal services problem

Posted on 2011-03-22
5
Medium Priority
?
757 Views
Last Modified: 2013-11-21
I need to setup a user account on my server to be able to logoff terminal services users when they have a problem with a disconnect. When I try the new account, I keep getting the following message.  "Session (ID 9) reset failed. (Error 5 - access is denied.) Is there some specific user right that I have to enable with this account to be able to do this? I have given it server rights and administrator rights and terminal services rights, already. It still doesn't work. Help!
0
Comment
Question by:trunnelli
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:nfmartins
ID: 35191155
Hi there,

Check this Microsoft Article:
http://technet.microsoft.com/en-us/library/cc753032(WS.10).aspx

Best Regards
NM
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35193193
By default, all members of the local administrators group on a TS have rights to log users off the server. But, those admin rights will NOT apply to any user sessions that were logged on BEFORE those rights were granted.  So, I think that might be why the one user can't log the other user off the system.

For example, let's say a user called Bob logged on last night at 9pm then he disconnects later instead of logging off.  This morning, Sally was made a member of the local admins group.  Sally sees Bob's disconnected session on the server and she wants to log him off, but she wouldn't be able to because her admin privileges weren't in effect at the time Bob first logged on the night before.

If you want to grant a non-admin user the rights to log users off the server, you'd have to grant them special rights using TS Configuration:
1.  Click on Start > All Programs > Administrative Tools
2.  Click on Terminal Services Configuration
3.  Double-click on the connection type (either RDP-TCP or ICA-TCP for citrix)
4.  Click on the Permissions tab
5.  add any users you need to add here
6.  Click on the Advanced button
7.  Click on the user or group name, then click on Edit to customize the user or group's rights in TSAdmin

To just log people off, users would only need to be granted "Logoff" rights.  That URL that NFMartins listed gives a good description of what the different permissions are.

Alicia
0
 

Accepted Solution

by:
trunnelli earned 0 total points
ID: 35282190
I solved it by making the user a domain admin. Not sure this is what I wanted but needed a fill-in for a week while I am out of the office. Will delete the accout on return.
0
 

Author Closing Comment

by:trunnelli
ID: 35321748
Would like this user to be able to do this job always, but don't want him/her to be a domain admin.
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35323361
You don't have to make the user a domain admin.  You can just make him a member of the local admins group on the TS to grant him rights to log users off of that TS.

Or, you could adjust the permissions in the Terminal Services Configuration console to grant non-admins rights to log users off as I described in my post above.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question