Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

RDS on 2008 R2 Server Running Active Directory

Posted on 2011-09-06
7
Medium Priority
?
611 Views
Last Modified: 2012-05-12
I know this is not "Best Practice" - But I need to have RDS running on a 2008 R2 Server running AD.  This is their only server.   I have everything configured except - I get an error stating that the account must be an administrative account.    I have read that you can enable "Allow log on thorugh Remote Desktop Service" in the group policy.  But I cannot find where this is located on the Domain Controller?   I am looking in the GBMC.MSC?   Wrong place?

COPIED:
Start Group Policy Management Editor and edit “Default Domain Controller” policy. Locate “Allow log on through Remote Desktop Services” User rights setting (Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\). Add the new security group and close the management console.

Thanks
0
Comment
Question by:Perry_Wood
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 2

Expert Comment

by:David11011
ID: 36489971
I know about 5 things that fit the acronym RDS. Which one are you using?
0
 
LVL 70

Expert Comment

by:KCTS
ID: 36489974
Set it in the Group Policy Management console and either apply it to the Domain Controllers OU or to the domain itself.
0
 
LVL 2

Expert Comment

by:David11011
ID: 36489977
oh lol I guess I should have read the tags. RDS terminal server. Nevermind
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 37

Expert Comment

by:Neil Russell
ID: 36490275
Not best practice? Its about as far from it as you can get.  IF the customer wants RDS running then YOU as their technology specialist should only give one answer. "You need another server."

The risk to their business is immense. And ONLY 1 server? What happens when the AD corrupts and NOBODY can log in to ANY workstation?

I would suguest you go back and tell them to either invest or sign a disclaimer saying its NOT your fault when it all goes pete tong!!
0
 

Author Comment

by:Perry_Wood
ID: 36491063
KCTS - Can you be more specific as to where this is?  I must be looking in the wrong locaction.  If I run the GBMC.MSC from the run command and bring up the Group Policy Manager, and drill down to the domain conftroller . . . Click on the tab that says setting,   . . . where to from there, or am I in the wrong location.  Thank you!
0
 
LVL 37

Accepted Solution

by:
Neil Russell earned 2000 total points
ID: 36491198
Start>Run>gpedit.msc
In left pane, expand Computer Configuration>Windows settings>Security Settings>Local policies>User Rights Assignment
Now in right-pane, double-click "Allow log on through terminal services" then click add and add non-administrative users.
Start>run>gpupdate /force

0
 

Author Closing Comment

by:Perry_Wood
ID: 36491696
THANK YOU!!!!!!!!!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question