Solved

Dcpromo and terminal server

Posted on 2012-03-20
4
972 Views
Last Modified: 2012-04-04
I have a terminal server that I want to add as an additional domain controller (for backup purposes). When I go to run dcpromo I get the following message:

Terminal Server is installed on this computer. Installing Active Directory on this computer will change security policy on this computer so that only Administrators will be able to log on to the computer. This is done to secure access to the computer. If you wish to allow other users to log on to this computer with Terminal Server, you will need to change the security settings in Group Policy after Active Directory has been installed.


What setting(s) in Group Policy do I need to change to allow for normal terminal server access?

P.S. I know that it is not recommended to have domain controller on the terminal server, but this is my task :)
0
Comment
Question by:goliveuk
  • 3
4 Comments
 
LVL 7

Expert Comment

by:abdulalikhan
ID: 37741132
Just change the Domain Controller Policy and allow logon to terminal services for the required user/group.
0
 
LVL 7

Expert Comment

by:abdulalikhan
ID: 37741146
If this is a 2008 Domain Controller, Go to Administrative tools - Local Security Policy; Go to local Policies - User Rights Assignment - Allow Logon through remote desktop services and add the required users/group.
0
 
LVL 7

Accepted Solution

by:
abdulalikhan earned 500 total points
ID: 37741155
If this did not work, Open Group Policy Management Editor and Go to domain controller OU expanding it will show you 'Default Domain Controllers Policy' open the policy for editing and go to Computer Configuration - Policies - Windows Settings - Security Settings - User Rights Assignment and define 'Allow Logon through Remote Desktop Services'
0
 
LVL 70

Expert Comment

by:KCTS
ID: 37741406
Its NEVER a good idea to have TS on a DC. It just throws security out of the of the door

I would question your 'task' and ask the taskmaster if they really way a DC with no security.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now