Solved

Test User cannot login WS via Remote Desktop

Posted on 2013-12-10
4
667 Views
Last Modified: 2013-12-28
Hi,

I know this is not a new topic but I believe I may have missed some steps, and Experts, please help me out. My problem is I have created a test user which is a Domain Users, I am trying to login my workstation via Remote Desktop by using this test user, however I was stopped by

"The connection was denied because the user account is not authorised for remote login"

What I have done so far were

- Enable Remote Desktop on my workstation(Win7) "Allow connection from computers running any version of Remote Desktop"

- On Domain Controller, I have edited Default domain Policy
    Computer Configuration\Policies\Administrative Templates\Network\Network    Connections\Windows firewall\Domain Profile. I enabled Allow inbound Remote Desktop exceptions, I set value is *

   Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. I enabled Allow users to connect remotely by using Remote desktop Services. And just optional, I also enabled Limit number of connections to 999999 (unlimited)

- I have added the test user to Remote Desktop Users group

- I have tried to run gpupdate , and also gpupdate /force. And even restart both the DC and the workstation. But I am still being stopped by that error.

I have read some sources that said I should add the test user to Remote Desktop Users when you enable Remote Desktop on workstation. I think it may work out this way but what if you had 1000 users?

So, Experts, please help me out. Which steps am I missing here? What should I configure on the Domain controller to enable the domain users can logon WS via Remote Desktop? Thank you.

Kind regards,
phucdk
0
Comment
Question by:phucdk
  • 2
4 Comments
 
LVL 13

Expert Comment

by:Carl Bohman
ID: 39708501
The most common cause I've seen for that error is that the user is not a member of the Remote Desktop Users group.  After running gpupdate, is the user still in that group on the workstation?
0
 
LVL 19

Expert Comment

by:deroode
ID: 39710712
Is the user member of the local workstation Remote Desktop Users group? you can easy make the mistake of adding the user to the domain "Remote Desktop Users" group, which doesn't work.
Also in our organization we have a domain "Remote Desktop" group, which is added by group policy to all workstations local Remote Desktop Users group; When this is the case, after you add a user to the domain "Remote Desktop" group make sure the users re-authenticates.
0
 

Accepted Solution

by:
phucdk earned 0 total points
ID: 39721085
Hi,

Thank you for your help, after googling around I managed to make this work by adding the Remote Desktop Users Group to Default Domain Policy\computer configuration\windows settings\Security Settings\Restricted Groups.

And in Remote Desktop Users Group I added Domain Users.

could anyone please explain why after putting  Remote Desktop Users Group into Restricted Groups, this allows users login via Remote Desktop? Thank you.

Regards,
Phucdk
0
 

Author Closing Comment

by:phucdk
ID: 39743322
The only solution that i can solve my problem is like in my own answer
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now