?
Solved

Test User cannot login WS via Remote Desktop

Posted on 2013-12-10
4
Medium Priority
?
679 Views
Last Modified: 2013-12-28
Hi,

I know this is not a new topic but I believe I may have missed some steps, and Experts, please help me out. My problem is I have created a test user which is a Domain Users, I am trying to login my workstation via Remote Desktop by using this test user, however I was stopped by

"The connection was denied because the user account is not authorised for remote login"

What I have done so far were

- Enable Remote Desktop on my workstation(Win7) "Allow connection from computers running any version of Remote Desktop"

- On Domain Controller, I have edited Default domain Policy
    Computer Configuration\Policies\Administrative Templates\Network\Network    Connections\Windows firewall\Domain Profile. I enabled Allow inbound Remote Desktop exceptions, I set value is *

   Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections. I enabled Allow users to connect remotely by using Remote desktop Services. And just optional, I also enabled Limit number of connections to 999999 (unlimited)

- I have added the test user to Remote Desktop Users group

- I have tried to run gpupdate , and also gpupdate /force. And even restart both the DC and the workstation. But I am still being stopped by that error.

I have read some sources that said I should add the test user to Remote Desktop Users when you enable Remote Desktop on workstation. I think it may work out this way but what if you had 1000 users?

So, Experts, please help me out. Which steps am I missing here? What should I configure on the Domain controller to enable the domain users can logon WS via Remote Desktop? Thank you.

Kind regards,
phucdk
0
Comment
Question by:phucdk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 13

Expert Comment

by:Carl Bohman
ID: 39708501
The most common cause I've seen for that error is that the user is not a member of the Remote Desktop Users group.  After running gpupdate, is the user still in that group on the workstation?
0
 
LVL 19

Expert Comment

by:deroode
ID: 39710712
Is the user member of the local workstation Remote Desktop Users group? you can easy make the mistake of adding the user to the domain "Remote Desktop Users" group, which doesn't work.
Also in our organization we have a domain "Remote Desktop" group, which is added by group policy to all workstations local Remote Desktop Users group; When this is the case, after you add a user to the domain "Remote Desktop" group make sure the users re-authenticates.
0
 

Accepted Solution

by:
phucdk earned 0 total points
ID: 39721085
Hi,

Thank you for your help, after googling around I managed to make this work by adding the Remote Desktop Users Group to Default Domain Policy\computer configuration\windows settings\Security Settings\Restricted Groups.

And in Remote Desktop Users Group I added Domain Users.

could anyone please explain why after putting  Remote Desktop Users Group into Restricted Groups, this allows users login via Remote Desktop? Thank you.

Regards,
Phucdk
0
 

Author Closing Comment

by:phucdk
ID: 39743322
The only solution that i can solve my problem is like in my own answer
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The article will show you how you can maintain a simple logfile of all Startup and Shutdown events on Windows servers and desktops with PowerShell. The script can be easily adapted into doing more like gracefully silencing/updating your monitoring s…
Resolve DNS query failed errors for Exchange
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question