?
Solved

Test User cannot login WS via Remote Desktop

Posted on 2013-12-10
4
Medium Priority
?
683 Views
Last Modified: 2013-12-28
Hi,

I know this is not a new topic but I believe I may have missed some steps, and Experts, please help me out. My problem is I have created a test user which is a Domain Users, I am trying to login my workstation via Remote Desktop by using this test user, however I was stopped by

"The connection was denied because the user account is not authorised for remote login"

What I have done so far were

- Enable Remote Desktop on my workstation(Win7) "Allow connection from computers running any version of Remote Desktop"

- On Domain Controller, I have edited Default domain Policy
    Computer Configuration\Policies\Administrative Templates\Network\Network    Connections\Windows firewall\Domain Profile. I enabled Allow inbound Remote Desktop exceptions, I set value is *

   Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. I enabled Allow users to connect remotely by using Remote desktop Services. And just optional, I also enabled Limit number of connections to 999999 (unlimited)

- I have added the test user to Remote Desktop Users group

- I have tried to run gpupdate , and also gpupdate /force. And even restart both the DC and the workstation. But I am still being stopped by that error.

I have read some sources that said I should add the test user to Remote Desktop Users when you enable Remote Desktop on workstation. I think it may work out this way but what if you had 1000 users?

So, Experts, please help me out. Which steps am I missing here? What should I configure on the Domain controller to enable the domain users can logon WS via Remote Desktop? Thank you.

Kind regards,
phucdk
0
Comment
Question by:phucdk
  • 2
4 Comments
 
LVL 13

Expert Comment

by:Carl Bohman
ID: 39708501
The most common cause I've seen for that error is that the user is not a member of the Remote Desktop Users group.  After running gpupdate, is the user still in that group on the workstation?
0
 
LVL 19

Expert Comment

by:deroode
ID: 39710712
Is the user member of the local workstation Remote Desktop Users group? you can easy make the mistake of adding the user to the domain "Remote Desktop Users" group, which doesn't work.
Also in our organization we have a domain "Remote Desktop" group, which is added by group policy to all workstations local Remote Desktop Users group; When this is the case, after you add a user to the domain "Remote Desktop" group make sure the users re-authenticates.
0
 

Accepted Solution

by:
phucdk earned 0 total points
ID: 39721085
Hi,

Thank you for your help, after googling around I managed to make this work by adding the Remote Desktop Users Group to Default Domain Policy\computer configuration\windows settings\Security Settings\Restricted Groups.

And in Remote Desktop Users Group I added Domain Users.

could anyone please explain why after putting  Remote Desktop Users Group into Restricted Groups, this allows users login via Remote Desktop? Thank you.

Regards,
Phucdk
0
 

Author Closing Comment

by:phucdk
ID: 39743322
The only solution that i can solve my problem is like in my own answer
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
Measuring Server's processing rate with a simple powershell command. The differences in processing rate also was recorded in different use-cases, when a server in free and busy states.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Suggested Courses

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question