Solved

Test User cannot login WS via Remote Desktop

Posted on 2013-12-10
4
677 Views
Last Modified: 2013-12-28
Hi,

I know this is not a new topic but I believe I may have missed some steps, and Experts, please help me out. My problem is I have created a test user which is a Domain Users, I am trying to login my workstation via Remote Desktop by using this test user, however I was stopped by

"The connection was denied because the user account is not authorised for remote login"

What I have done so far were

- Enable Remote Desktop on my workstation(Win7) "Allow connection from computers running any version of Remote Desktop"

- On Domain Controller, I have edited Default domain Policy
    Computer Configuration\Policies\Administrative Templates\Network\Network    Connections\Windows firewall\Domain Profile. I enabled Allow inbound Remote Desktop exceptions, I set value is *

   Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. I enabled Allow users to connect remotely by using Remote desktop Services. And just optional, I also enabled Limit number of connections to 999999 (unlimited)

- I have added the test user to Remote Desktop Users group

- I have tried to run gpupdate , and also gpupdate /force. And even restart both the DC and the workstation. But I am still being stopped by that error.

I have read some sources that said I should add the test user to Remote Desktop Users when you enable Remote Desktop on workstation. I think it may work out this way but what if you had 1000 users?

So, Experts, please help me out. Which steps am I missing here? What should I configure on the Domain controller to enable the domain users can logon WS via Remote Desktop? Thank you.

Kind regards,
phucdk
0
Comment
Question by:phucdk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 13

Expert Comment

by:Carl Bohman
ID: 39708501
The most common cause I've seen for that error is that the user is not a member of the Remote Desktop Users group.  After running gpupdate, is the user still in that group on the workstation?
0
 
LVL 19

Expert Comment

by:deroode
ID: 39710712
Is the user member of the local workstation Remote Desktop Users group? you can easy make the mistake of adding the user to the domain "Remote Desktop Users" group, which doesn't work.
Also in our organization we have a domain "Remote Desktop" group, which is added by group policy to all workstations local Remote Desktop Users group; When this is the case, after you add a user to the domain "Remote Desktop" group make sure the users re-authenticates.
0
 

Accepted Solution

by:
phucdk earned 0 total points
ID: 39721085
Hi,

Thank you for your help, after googling around I managed to make this work by adding the Remote Desktop Users Group to Default Domain Policy\computer configuration\windows settings\Security Settings\Restricted Groups.

And in Remote Desktop Users Group I added Domain Users.

could anyone please explain why after putting  Remote Desktop Users Group into Restricted Groups, this allows users login via Remote Desktop? Thank you.

Regards,
Phucdk
0
 

Author Closing Comment

by:phucdk
ID: 39743322
The only solution that i can solve my problem is like in my own answer
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question