grant remote desktop to AD as account operator

Posted on 2011-10-05
Last Modified: 2012-08-13
Hellow experts,

I want to grant remote desktop to our AD server, but just as an account operater, how to do that.
I have given remote desktop right to that user, but still can't login, the error message is no permission.

Question by:uknet80
    LVL 6

    Accepted Solution

    you must also give that user logon rights to the server.
    LVL 6

    Expert Comment

    open. Administrative Tools, Domain Security Policy.
    Local Policies
    User Rights assignment
    Alow log on locally:  add the selected user (must also have Administrators group in there)

    there are some warnings in kb823659
    LVL 39

    Assisted Solution

    by:Krzysztof Pytko
    Can you tell me why? You can install "Administrative Tools" or "Remote Server Administrative Tools" on users workstation and give them possibility to use apporpriate consoles to manage AD (before that you need to delegate control to AD functions for them)

    And they don't need to log on to DC. That's for security reason

    LVL 7

    Assisted Solution

    I agree with iSeik. By propagating the rights to the account operators is a breach of a security. You are giving access to the Domain Controller to Allow Logon Locally.

    This should only be controlled by the Domain Admins. I personally should not go ahead and give the rights unless the person knows how to operate the Active Directory and the person should be reliable. Don't delegate the control like this.

    Good Luck..!!

    Author Comment

    can you tell me where to get Administrative Tool in install in windows 7.

    LVL 39

    Assisted Solution

    by:Krzysztof Pytko

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now