Click here to get back home

can't login using RDP even in Remote Desktop User group

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
can't login using RDP even in Remote Desktop User group benù·§v+ºË"¢{&‰Ê貇ír‰ 07-06-2005
Posted by benù·§v+ºË"¢{&‰Ê貇ír‰ on July 6, 2005, 8:54 am
Please log in for more thread options
I have a w2k3 ADS domain and a couple of member servers, my users need to
login remotely into the member servers using terminal client, I put them in
one global group and put this group into Remote Desktop Users group, also
grant Remote Desktop User group the right of logon using terminal services,
when user try to login, they still get the message that the account can't be
login and must be in Remote Desktop User group and granted rights etc.,do I
need to assign Remote Desktop Users group the right of logon locally? or any
other ways?

Thanks!!

ben


Posted by Dean Wells [MVP] on July 7, 2005, 5:59 pm
Please log in for more thread options
How many DC's do you have (is replication latency a possible cause)?
Have you manually adjusted the ACL on the RDP-tcp object within the
Terminal Configuration snap-in? Are these member servers or DCs? Are
the machines at which the user logon attempts fail witihn the scope of a
group policy that controls the 'Allow log on locally' and 'Allow logon
through Terminal Services' (or something similar in its verbiage)
rights?

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

ben wrote:
> I have a w2k3 ADS domain and a couple of member servers, my users
> need to login remotely into the member servers using terminal client,
> I put them in one global group and put this group into Remote Desktop
> Users group, also grant Remote Desktop User group the right of logon
> using terminal services, when user try to login, they still get the
> message that the account can't be login and must be in Remote Desktop
> User group and granted rights etc.,do I need to assign Remote Desktop
> Users group the right of logon locally? or any other ways?
>
> Thanks!!
>
> ben




Posted by Dean Wells [MVP] on July 7, 2005, 6:00 pm
Please log in for more thread options
.... one other thought, are the users trying to log on to the console?

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

ben wrote:
> I have a w2k3 ADS domain and a couple of member servers, my users
> need to login remotely into the member servers using terminal client,
> I put them in one global group and put this group into Remote Desktop
> Users group, also grant Remote Desktop User group the right of logon
> using terminal services, when user try to login, they still get the
> message that the account can't be login and must be in Remote Desktop
> User group and granted rights etc.,do I need to assign Remote Desktop
> Users group the right of logon locally? or any other ways?
>
> Thanks!!
>
> ben




Posted by Steven L Umbach on July 7, 2005, 8:56 pm
Please log in for more thread options
Try adding a test user directly to the user right for allow logon through
terminal services on the server to see if that works for that user. Another
thing to check is that the user/group has permissions to the RDP. Use
administrative tools/Terminal Services Configuration/connections/RDP -
properties/permissions. Also look in the security log in Event Viewer to see
if any pertinent even ID's have been recorded that may provide a clue. ---
Steve


>I have a w2k3 ADS domain and a couple of member servers, my users need to
> login remotely into the member servers using terminal client, I put them
> in
> one global group and put this group into Remote Desktop Users group, also
> grant Remote Desktop User group the right of logon using terminal
> services,
> when user try to login, they still get the message that the account can't
> be
> login and must be in Remote Desktop User group and granted rights etc.,do
> I
> need to assign Remote Desktop Users group the right of logon locally? or
> any
> other ways?
>
> Thanks!!
>
> ben




Posted by benù·§v+ºË"¢{&‰Ê貇ír‰ on July 12, 2005, 11:35 am
Please log in for more thread options
Thanks, it's not the logon locally right but the permission of RDP
properties, I have a group policy assign "logon using terminal services" but
it looks the RDP permission still has to be manually changed.

"Steven L Umbach" wrote:

> Try adding a test user directly to the user right for allow logon through
> terminal services on the server to see if that works for that user. Another
> thing to check is that the user/group has permissions to the RDP. Use
> administrative tools/Terminal Services Configuration/connections/RDP -
> properties/permissions. Also look in the security log in Event Viewer to see
> if any pertinent even ID's have been recorded that may provide a clue. ---
> Steve
>
>
> >I have a w2k3 ADS domain and a couple of member servers, my users need to
> > login remotely into the member servers using terminal client, I put them
> > in
> > one global group and put this group into Remote Desktop Users group, also
> > grant Remote Desktop User group the right of logon using terminal
> > services,
> > when user try to login, they still get the message that the account can't
> > be
> > login and must be in Remote Desktop User group and granted rights etc.,do
> > I
> > need to assign Remote Desktop Users group the right of logon locally? or
> > any
> > other ways?
> >
> > Thanks!!
> >
> > ben
>
>
>


Similar ThreadsPosted
Administrator not able to login to DC via Remote Desktop August 20, 2006, 11:13 pm
Is Remote Desktop Connection Login secure over wireless? July 16, 2005, 1:26 pm
Remote desktop February 21, 2006, 3:25 pm
SSL and Remote Desktop February 27, 2008, 7:53 pm
Can connect via Remote Desktop September 26, 2005, 12:36 pm
remote desktop security February 18, 2006, 5:38 pm
Windows Remote Desktop April 16, 2006, 7:17 am
Secure Remote Desktop August 10, 2006, 11:00 pm
RDP: remote desktop issues September 23, 2007, 3:13 pm
Remote Desktop Protocol October 29, 2007, 5:16 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap