Solved

terminal services problem

Posted on 2011-03-22
5
753 Views
Last Modified: 2013-11-21
I need to setup a user account on my server to be able to logoff terminal services users when they have a problem with a disconnect. When I try the new account, I keep getting the following message.  "Session (ID 9) reset failed. (Error 5 - access is denied.) Is there some specific user right that I have to enable with this account to be able to do this? I have given it server rights and administrator rights and terminal services rights, already. It still doesn't work. Help!
0
Comment
Question by:trunnelli
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 13

Expert Comment

by:nfmartins
ID: 35191155
Hi there,

Check this Microsoft Article:
http://technet.microsoft.com/en-us/library/cc753032(WS.10).aspx

Best Regards
NM
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35193193
By default, all members of the local administrators group on a TS have rights to log users off the server. But, those admin rights will NOT apply to any user sessions that were logged on BEFORE those rights were granted.  So, I think that might be why the one user can't log the other user off the system.

For example, let's say a user called Bob logged on last night at 9pm then he disconnects later instead of logging off.  This morning, Sally was made a member of the local admins group.  Sally sees Bob's disconnected session on the server and she wants to log him off, but she wouldn't be able to because her admin privileges weren't in effect at the time Bob first logged on the night before.

If you want to grant a non-admin user the rights to log users off the server, you'd have to grant them special rights using TS Configuration:
1.  Click on Start > All Programs > Administrative Tools
2.  Click on Terminal Services Configuration
3.  Double-click on the connection type (either RDP-TCP or ICA-TCP for citrix)
4.  Click on the Permissions tab
5.  add any users you need to add here
6.  Click on the Advanced button
7.  Click on the user or group name, then click on Edit to customize the user or group's rights in TSAdmin

To just log people off, users would only need to be granted "Logoff" rights.  That URL that NFMartins listed gives a good description of what the different permissions are.

Alicia
0
 

Accepted Solution

by:
trunnelli earned 0 total points
ID: 35282190
I solved it by making the user a domain admin. Not sure this is what I wanted but needed a fill-in for a week while I am out of the office. Will delete the accout on return.
0
 

Author Closing Comment

by:trunnelli
ID: 35321748
Would like this user to be able to do this job always, but don't want him/her to be a domain admin.
0
 
LVL 17

Expert Comment

by:Spike99
ID: 35323361
You don't have to make the user a domain admin.  You can just make him a member of the local admins group on the TS to grant him rights to log users off of that TS.

Or, you could adjust the permissions in the Terminal Services Configuration console to grant non-admins rights to log users off as I described in my post above.
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

1. Boot PC and press F10, select storage options and change the compatibility from “AHCI” to “IDE”, save and exit 2. Boot PC and press F12 3. Upon PXE display of searching for DHCP server, press Pause break to obtain MAC address 3. Open Configu…
The question has been asked on multiple occasions as to how best to do printing in a remote desktop or terminal services environment.   It seems that this particular question has plagued several people and most especially as Terminal Services, as…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question