Windows 2008 Server RDP & Group Policy

I have a new windows 2008 server running remote access for our VPN clients. When I join it to our AD I cannot RDP to it but I can VNC to it. As soon as I remove it from the domain & put it in a workgroup RDP will work ok.
Where in the default domain controllers policy would that be stopped? or am I barking up the wrong tree totally & its something else
Richard GrayIT & QA ManagerAsked:
Who is Participating?
 
adriaanvwConnect With a Mentor Commented:
Hi,

First, check your firewall rules once you have joined the domain, ensuring RDP is allowed on the new server. (http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2rds/thread/811b722f-78e4-479c-afc8-bbfd604447fa)

You need to add the server to the allowed list for RDP access in AD. You can achieve this as follows:

Two group policy changes should do the trick, followed by a gpupdate /force or waiting for the policy to be distributed to domain members/clients:

Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile > Allow inbound Remote Desktop exception.  Note that I recommend limiting the IP addresses that have access as explained in the notes of that policy, if possible, as a best practice.

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections > Allow users to connect remotely using Remote Desktop Services

Full article here: http://www.nojokeit.com/2011/02/enable-remote-desktop-in-server-2008-r2.html
0
 
Richard GrayIT & QA ManagerAuthor Commented:
Had done the first part anyway, the second part I dont have as its a Windows 2003 AD so I dont have the option Remote Desktop Services its still terminal services
0
 
Richard GrayIT & QA ManagerAuthor Commented:
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.