Solved

Can't deny access Windows 2008 r2 RDP

Posted on 2013-11-08
2
412 Views
Last Modified: 2013-11-08
I’m running a Windows 2008 R2 server for remote desktop purpose. From the Control Panel\System and Security\System is selected the “Remote settings” and select the users (also tested with group) who have access to this server via RDP.

But even if a users isn’t listed in this overview he still can access the server with his RDP client. How can I fix this? I have a AD group that needed to be listed here for accessing this server.
0
Comment
Question by:sitpro
2 Comments
 
LVL 7

Expert Comment

by:Sumit Gupta
ID: 39632858
Please logon to your server as administrator, Start--Run--secpol.msc.  In the left pane navigate to Security Settings\Local Policies\User Rights Assignment, in the right pane double-click on Allow log on through Remote Desktop Services, click add users or groups, enter Remote Desktop Users, click OK to save.
After performing the above please test that you can connect using Remote Desktop Connection as a standard user that is a member of RDU group.
0
 
LVL 15

Accepted Solution

by:
Jaroslav Mraz earned 500 total points
ID: 39632894
In windows server enviroment you need use local groups on server. Remote desktop users group is the access to TS server or RDP. There you can add user with alowed access. Don use other metods.

http://technet.microsoft.com/en-us/library/cc743161.aspx

If you use Termianl Server role you must chceck autorization policy there are user and Computers specified that can sue server.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Hallo! I guess almost every Windows Administrator must have got stumped with this question "Where does WINDOWS store a users cached credentials? Every user who had once logged onto a Server/Desktop while it was connected to the domain could sti…
by Nathan Brom/Bromy2004 Introduction There are numerous websites out there for any different type of program you can imagine.  Of those, you'll need to decide which ones are legitimate and aren't trying to steal your money or infect your comput…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now