Login through Terminal Services Not working

I have been using TS for years and have one that has stumped me.

I cannot get any RDP connections remotely with out console mode. I have:
- I added TS through Add/Remove Prog,
- Pointed to the TS License Server (and it resolved with the button),
- Verified the users I am using are explicitly or through a group added to the Remote Desktop Users
- Verified the group has security permissions to the MS RDP connection in TS Config.
- Verified through local and domain group policy that Allow login through Terminal Services is granted
- Also added "login Locally" permissions just for troubleshooting.

I have been using RDP for administration for a while on this server, but now need to increase the number of connections. The License Server shows 110 available CALs.

I added Citrix to the search because I figure it would help get some exposure, but there is no Citrix installed.

LVL 4
reubstrAsked:
Who is Participating?
 
reubstrAuthor Commented:
I resolved it.

Even though when you would auto discover the TS License server, it would respond that it was a valid TS License server, the server had an issue.

MS had a hotfix you have to email them to download, had to run it on the TS License Server, and then it worked after rebooting the TS.

The other TS Servers were all working fine.

http://support.microsoft.com/kb/2021885 
http://support.microsoft.com/kb/983385 
0
 
K_WilkeCommented:
What OS are you trying to connect to?
Is there an error that comes up when you try to connect?
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
Server 2k3 R2.

I had that in there, but must have deleted it when editing the post.
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
reubstrAuthor Commented:
to log on to this remote computer you must have terminal server access permissions on this computer. by default, members of the remote.... etc...
0
 
K_WilkeCommented:
Any errors coming up when you are trying to connect?
Thanks,
Kelly W.
0
 
Carl WebsterCommented:
Use ProcMon to see what is failing?

http://technet.microsoft.com/en-us/sysinternals/bb896645

I know you don't have Citrix involved bbut look at this article I wrote.  http://www.dabcc.com/article.aspx?id=17234 had a customer with the same issue.
0
 
reubstrAuthor Commented:
I can ping in and out,
0
 
K_WilkeCommented:
Wild thought here.
What is in your hosts and lmhosts files?
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
Didn't mean to post that. I was about to type out a response and changed what I was going to type.

I will try the sysinternals deal if it will help.

I read your article and info believe it is a different problem as connectivity and dns is working. What isn't working is once I installed TS. If I uninstall I get 2 admin connections. Once I install TS I do not get any.
0
 
reubstrAuthor Commented:
I downloaded procmon and I ran it during an attempt, but I am not certain of what to look for in there. I browsed through and filtered and changed what all was displayed and nothing obvious stood out as a reason why it failed.
RDPFail.jpg
0
 
K_WilkeCommented:
Hello,
Try this from another site:
# Run Add/Remove Programs (run "appwiz.cpl")
# Click Add/Remove Windows Components (Alt-W)
# Uncheck Terminal Server
# Press Next>.
# Follow instructions, including rebooting.
# Open System control panel applet (run "sysdm.cpl")
# Click Remote tab.
# Check Enable Remote Desktop on this computer. (because removing Terminal Server disables this)
# Click Select Remote Users...
# Make sure administrators is in the list.
# Click OK.
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
Thanks Kelly, but as I stated, I already tried that.

What isn't working is once I installed TS. If I uninstall I get 2 admin connections. Once I install TS I do not get any.
0
 
K_WilkeCommented:
i wonder if there is a group policy from the default policy that is overriding this.
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
No policies over-riding this.
0
 
K_WilkeCommented:
Has this server been added as a domain controller, recently?
If so then you will have to go to the domain control policy and add the remote desktop users to logon locally.
Thanks,
Kelly W.
0
 
K_WilkeCommented:
Also, Do you have terminal services installed in aadministration mode rather than just
application mode?
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
No to DC.

The default is administration. It works fine in administration mode (unchecking the box as you mentioned earlier). It is only when the TS is installed that I have a problem. I can only get in with as console.
0
 
reubstrAuthor Commented:
CarlWebster, any other ideas? It seems so strange. It is like TS as an application isn't functioning within its own defined parameters. It says you arent in a group that has access, but when you check, you do have them in the group.
0
 
Carl WebsterCommented:
In ProcMon, filter on result is not equal to success.  That will show you what is not working as expected.
0
 
reubstrAuthor Commented:
I ran ProcMon and set the filter, and cleart the log, then hit enter after I entered my user and pass. I ended up with 140 events, but I am not seeing anything intuitive to tell me it is the culprit.
0
 
Carl WebsterCommented:
I can't remember right now, can you save the remaining events to a file and send them to me?  webster@carlwebster.com
0
 
Carl WebsterCommented:
No errors or failures in the log.  Bummer.

see if these can offer any suggestions.  Even tho you don't have Citrix, just see if there is anything in them you can use for troubleshooting.

http://www.techbytes.ca/techbyte146.html
http://support.citrix.com/article/CTX109925
http://technet.microsoft.com/en-us/library/cc781509(WS.10).aspx
0
 
reubstrAuthor Commented:
I read all the articles (some 2 or 3 times over the past couple days) again today to see if I missed something. And I have verified that the group has permissions on the connection of at least user and I tested with administrator permissions.

0
 
reubstrAuthor Commented:
Here is the other thing I dont understand. Why are the 2 administrative TS connections valid when I uninstall TS. But then no TS connections (other than console) work when I install TS.
0
 
Carl WebsterCommented:
You probably already know this but the 2 TS connections are valid cuz TS is now in admin mode which allows only 2 connections.

Have you checked for and deleted the TS Licensing registry key and then rebooted the server?
0
 
reubstrAuthor Commented:
Yes. What I don't know is why none work.

he key in HKLM\SOFTWARE\Microsoft\MSLicensing\Store? I checked and there was no LICENSE001
0
 
Carl WebsterCommented:
Thirty-two bit RDP clients store their license under the key HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing

To clean the client's license cache, just delete this key and its subkeys. The next time the client connects to the server, it will obtain another license

http://support.microsoft.com/kb/187614
0
 
reubstrAuthor Commented:
I am running win 7 64 bit. It doesnt seem to be applicable to my client OS based off what I was reading. Is there something different I need to do?
0
 
Carl WebsterCommented:
I meant for you to do that on the bad server with the TS issue.
0
 
reubstrAuthor Commented:
That would definitly make more sense. It just seemed to refer to 'client' instead of the TS Server.

Results of removing the key: Same message.
0
 
Carl WebsterCommented:
Then I am out of ideas to try at this point.  Sorry.
0
 
reubstrAuthor Commented:
Thanks for your help up to this point.

Everything is set to spec. I don't know why the TS will not allow anyone to login. I have a few other TS that we use in production and I have never had this problem when adding the TS to a server.
0
 
K_WilkeCommented:
any errors coming up on the event viewer of the TS server?
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
1010 error. But MS says ignore it if XYZ settings are met, and the OS is 2k3.
0
 
K_WilkeCommented:
Okay what is the source for the 1010 error?
Could you provide an exact message?
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
TermService
1010
The terminal server could not locate a license server. Confirm that all license servers on the network are registered in WINS/DNS, accepting network requests, and the Terminal Server Licensing Service is running.
0
 
K_WilkeCommented:
Would this help with this error:
http://support.microsoft.com/kb/279561
Thank you,
Kelly W.
0
 
reubstrAuthor Commented:
No. As I can already resolve through TS Configuration that the License Server is available and valid for serving 2003 ts license.
0
 
K_WilkeCommented:
This is a tough one and I am grasping at straws.
Could it be possible that the certificate for TS is corrupted?
http://support.microsoft.com/kb/329896
Thanks,
Kelly W.
0
 
reubstrAuthor Commented:
Thanks Carl for your answers.
Thanks Kelly for your efforts.
0
 
reubstrAuthor Commented:
The problem was in the License server after all.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.