• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 847
  • Last Modified:

Must be a domain admin to connect to a terminal server

I am adding a new terminal services user to a Windows Small Business Server 2003R2. The user can only connect to the Terminal Server if he is a member of the domain admins group. Where do I give the user rights to login? I cannot allow a user to be a domain admin.
0
Racer1950
Asked:
Racer1950
  • 4
  • 3
1 Solution
 
Rob WilliamsCommented:
They need to be added to the "remote desktop user" group on the terminal server.  We usually create a group in AD called Terminal Server Users, and add this group to the "remote desktop User" group on the terminal server.  You can then add members to this group or add the "Domain Users" group, if all users are to have access.
0
 
Racer1950Author Commented:
I had already added the user to the remote desktop users group in AD on the DC, but it still did not work. Any ideas.
0
 
Rob WilliamsCommented:
That will not work, it's a different group. It must be the remote desktop user's group on the terminal server itself, which is a local group, not a domain group.
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

 
Racer1950Author Commented:
I added the domain user to the terminal servers local remote users group.
0
 
Rob WilliamsCommented:
Did it work?
If not check the terminal server's local group policy (gpedit.msc)  under:
local computer policy | computer configuration | windows settings | security settings | local policies | User rights assignment | allow logon through remote desktop services and verify the remote desktop users group is present.

I am assuming you have a separate terminal server and you are not referring to accessing the small business server through remote desktop.  SBS only allows remote access for admin purposes.
0
 
Racer1950Author Commented:
Bravo! It worked. The user needed to be added to the group policy.
0
 
Rob WilliamsCommented:
The group is supposed to be there by default but sometimes missing.
Glad to hear you were able to resolve.
Cheers!
--Rob
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now