Remote desktop users?

I've got a 2008 sbs domain & am trying to remotely set up a computer for a new user.
When adding new computer through the SBS Console, I granted her access to an office computer, as a local admin & the 'can log on remotely to this computer' option is checked & grayed out, as if I couldn't change it if I wanted to. When trying to connect via terminal services as the new user, I get the message 'the connection was denied because the user account is not authorized for remote login'. If that's the case, what good is the 'can log on remotely to this computer' option? If I try connecting the same way as the domain admin, I get the message 'to log on to this remote computer, you must be granted the Allow log on through terminal services right....'. First off, shouldn't domain admin  pretty much be able to do and/or access anything & everything, unless it's been specifically blocked? Secondly, I know I could go to that computer & add that user to local remote users group & this would be fixed, but I really didn't want to drive the 65 miles there & 65 miles back to do this! Is there any way I can 'fix' this remotely?
Thanks!
LVL 1
gromackAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
Sounds like someone messed around with the default account rights on the workstation.  
Make sure your account and the user in question are in the local group for Remote Desktop on the workstation - you SHOULD be able to manage group membership remotely through Computer Management - if the remote workstation's firewall isn't blocking you.  If you have to support remote systems at a distance, I would suggest you invest in some remote management tools.  Unfortunately, my favorite just changed their pricing structure - ScreenConnect - and it's no longer very reasonable for small shops; you can check out SimpleHelp though.  (These are PAID solutions).
1
gromackAuthor Commented:
I thought it may be a policy thing & was able to connect a co0uple of hours later, maybe after everything updated? I used to use log me in everywhere, but they've kind of gone off the deep end, too. I'll check out simple help, thanks!
0
MPCP-MattCommented:
TeamViewer is a decent option as well. Worth checking out, depending on your budget.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

David AtkinTechnical DirectorCommented:
Did you use the Connect wizard to join the PC onto the domain?
0
gromackAuthor Commented:
Originally used http://connect to join domain, then used sbs console to assign a new user to that computer.
0
David AtkinTechnical DirectorCommented:
Ok, when giving the user local admin rights it auto enables them for remote so this is why the check box is ticked and greyed out on the PC properties in the console.

Check on the local machine under user groups to make sure that the user is indeed in local admins and Remote Desktop users. Sometimes it doesn't apply.
0
gromackAuthor Commented:
As it turned out, it looks like waiting till policies, etc., were updated fixed the problem.
DO I just close question at this point? Can I just split points, as a thinks to all who offered advice?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
David AtkinTechnical DirectorCommented:
Entirely up to you.  If you feel that you've benefited from the expert comments then assign points.  If not then just close the question.
0
gromackAuthor Commented:
It was the one that worked...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Remote Access

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.