Must be a domain admin to connect to a terminal server
I am adding a new terminal services user to a Windows Small Business Server 2003R2. The user can only connect to the Terminal Server if he is a member of the domain admins group. Where do I give the user rights to login? I cannot allow a user to be a domain admin.
Rob Williams
They need to be added to the "remote desktop user" group on the terminal server. We usually create a group in AD called Terminal Server Users, and add this group to the "remote desktop User" group on the terminal server. You can then add members to this group or add the "Domain Users" group, if all users are to have access.
ASKER
I had already added the user to the remote desktop users group in AD on the DC, but it still did not work. Any ideas.
That will not work, it's a different group. It must be the remote desktop user's group on the terminal server itself, which is a local group, not a domain group.
ASKER
I added the domain user to the terminal servers local remote users group.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Bravo! It worked. The user needed to be added to the group policy.
The group is supposed to be there by default but sometimes missing.
Glad to hear you were able to resolve.
Cheers!
--Rob
Glad to hear you were able to resolve.
Cheers!
--Rob