Solved

Terminal Server only allowing connection to Console Session - no one else can log on!

Posted on 2013-01-25
5
966 Views
Last Modified: 2013-01-26
Hi,

Suddenly I got a call today that users were no longer able to log onto one of our Terminal Servers (W2K3). In addition, there were a few users who had previously logged on earlier in the day but if these users logged off they were also NOT able to log back on.) At first I was pretty sure this was a firewall issue (which it might have been in the beginning), but now I am seeing the following:

Although I am able to access the console session on this machine remotely (using the "admin" switch"), NO OTHER USERS (not even my Domain Admin account) are able to log onto this terminal server. Any attempt to RDP to this machine (other than session "0") by anyone produces the Logon Message below (we've all seen this one before):

"To log onto this remote computer, you must have Terminal Server Access permissions on this computer" ...... If you are not a member of the Remote Desktop User group.... "  Etc.

I've checked the local Remote Desktop Users group and nothing there has changed from when it was working previously.

I've also checked the following:

*Terminal Services Configuration\Connections -- RDP-Tcp properties ¦ Permissions Tab: --> I added both a local and domain user explicitly and enabled full control but it still does not work

*Checked the Local Security Settings ¦ Allow log on through Terminal Services --> The Remote Desktop Users group is present and the proper domain and local user(s) group(s) have been added but still no dice

*I've checked the domain GPOs and none of these should be blocking user access (like I said, nothing was changed, the problem "just started happening".  Very bizarre.)

I'm not sure where else to look.

Any ideas?
0
Comment
Question by:cfsa
  • 3
  • 2
5 Comments
 
LVL 2

Expert Comment

by:browningit
Comment Utility
Sounds to me like the you need to restart the Terminal Services, or just reboot your Terminal server altogether as a first step.  I'll spend a little more time in assisting after you give that a whirl and post the results.  If you need to figure out a way to do this without restarting the server (and thus losing user data) please let me know.

Cheers,
0
 

Author Comment

by:cfsa
Comment Utility
Sorry, I should have mentioned that I rebooted the server - twice.  No change.
0
 
LVL 2

Assisted Solution

by:browningit
browningit earned 500 total points
Comment Utility
Check out the comments on this person's solution, as well as the other posters.

http://www.techrepublic.com/forum/questions/101-210295/terminal-server-user-access-problem-windows-2003

I would start with a network cable disconnect, and then move to this thread which is linked in the above post:

http://blogs.msdn.com/ts/archive/2006/11/29/remote-desktop-connection-terminal-services-client-6-0-for-windows-xp-and-windows-server-2003-english-only-released.aspx

Let me know how that works out!
0
 
LVL 2

Accepted Solution

by:
browningit earned 500 total points
Comment Utility
I also found this:

Run Add/Remove Programs (run "appwiz.cpl")
Click Add/Remove Windows Components (Alt-W)
Uncheck Terminal Server
Press Next>.
Follow instructions, including rebooting.
Open System control panel applet (run "sysdm.cpl")
Click Remote tab.
Check Enable Remote Desktop on this computer. (because removing Terminal Server disables this)
Click Select Remote Users...
Make sure administrators is in the list.
Click OK.
Click OK. for the next dialog.
Wait a few minutes for things to get up and running and you're no ready for remote administration again.

Cheers,
0
 

Author Closing Comment

by:cfsa
Comment Utility
I appreciate all of the helpful comments. In the end, we discovered that the firewall lost one of its rules (don't ask me how) and was filtering traffic to the Licensing Server. After re-establishing communications with it, a reboot of the Terminal Server solved our problems.<br /><br />Thanks to everyone. -j
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This is a fairly complicated script that will install the required prerequisites to install SCCM 2012 R2 on a server.  It was designed under the functional model in order to compartmentalize each step required, reducing the overall complexity.  The …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
This video discusses moving either the default database or any database to a new volume.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now