Only Administrators User can access to Remote Desktop

[Juan Carlos Flores]

I have a problem, when i want to configure a user to access to RD, by giving
them into the group "Remote Desktop Users", the users can not access,
receiving a message indicating that they no have the correct permision and
meybe if i put them into the group of "Remote Desktop Users" they can have
access to RD.

If i put the users into Administrators Users Group then all of them have the
rigth access.

I will appreciate any help you can give me.


Juan Carlos Flores
Choluteca Honduras.

 

[Vera Noest [MVP]]

Is your server running Remote Desktop for Administration or full-
blown Terminal Services?
Is the server a member server in a domain, or a Domain Controller?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul 2007
in microsoft.public.windows.terminal_services:

> I have a problem, when i want to configure a user to access to
> RD, by giving them into the group "Remote Desktop Users", the
> users can not access, receiving a message indicating that they
> no have the correct permision and meybe if i put them into the
> group of "Remote Desktop Users" they can have access to RD.
>
> If i put the users into Administrators Users Group then all of
> them have the rigth access.
>
> I will appreciate any help you can give me.
>
>
> Juan Carlos Flores
> Choluteca Honduras.

 

[Juan Carlos Flores]

> Is your server running Remote Desktop for Administration or full-
> blown Terminal Services?
Both... i have some clients running application over TS and i need to
access for administration.



> Is the server a member server in a domain, or a Domain Controller?
It is a Domain Controller







"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> escribió en el
mensaje news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...
> Is your server running Remote Desktop for Administration or full-
> blown Terminal Services?
> Is the server a member server in a domain, or a Domain Controller?
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul 2007
> in microsoft.public.windows.terminal_services:
>
>> I have a problem, when i want to configure a user to access to
>> RD, by giving them into the group "Remote Desktop Users", the
>> users can not access, receiving a message indicating that they
>> no have the correct permision and meybe if i put them into the
>> group of "Remote Desktop Users" they can have access to RD.
>>
>> If i put the users into Administrators Users Group then all of
>> them have the rigth access.
>>
>> I will appreciate any help you can give me.
>>
>>
>> Juan Carlos Flores
>> Choluteca Honduras.

 

[Vera Noest [MVP]]

OK, I assume that you know that running TS on a Domain Controller
is *not* recommended, for both performance and security reasons. By
installing TS, you configured your Domain Controller as a multi-
user workstation. That's a risky situation on a critical server.

That said, you'll have to make your users members of the Domain
Local built-in group Remote Desktop Users in AD.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul 2007
in microsoft.public.windows.terminal_services:

>> Is your server running Remote Desktop for Administration or
>> full- blown Terminal Services?
>
> Both... i have some clients running application over TS and i
> need to access for administration.
>
>> Is the server a member server in a domain, or a Domain
>> Controller?
>
> It is a Domain Controller
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
> escribió en el mensaje
> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...
>> Is your server running Remote Desktop for Administration or
>> full- blown Terminal Services?
>> Is the server a member server in a domain, or a Domain
>> Controller?
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul
>> 2007 in microsoft.public.windows.terminal_services:
>>
>>> I have a problem, when i want to configure a user to access to
>>> RD, by giving them into the group "Remote Desktop Users", the
>>> users can not access, receiving a message indicating that they
>>> no have the correct permision and meybe if i put them into the
>>> group of "Remote Desktop Users" they can have access to RD.
>>>
>>> If i put the users into Administrators Users Group then all of
>>> them have the rigth access.
>>>
>>> I will appreciate any help you can give me.
>>>
>>>
>>> Juan Carlos Flores
>>> Choluteca Honduras.

 

[Juan Carlos Flores]

I've tried a lot with that with no results.

Really the same server as DC and Data server and application server is not a
risk situation for me cause is just a few users that has the necesity to do
this, but i need that these user can access to the TS only as member of RD
Users Group, but that is imposible for me at this moment i don't know why.
Only the Administrators member can access by TS.


Regards

Juan Carlos Flores
Choluteca, Honduras


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> escribió en el
mensaje news:Xns9969EB6C3F466veranoesthemutforsse@207.46.248.16...
> OK, I assume that you know that running TS on a Domain Controller
> is *not* recommended, for both performance and security reasons. By
> installing TS, you configured your Domain Controller as a multi-
> user workstation. That's a risky situation on a critical server.
>
> That said, you'll have to make your users members of the Domain
> Local built-in group Remote Desktop Users in AD.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul 2007
> in microsoft.public.windows.terminal_services:
>
>>> Is your server running Remote Desktop for Administration or
>>> full- blown Terminal Services?
>>
>> Both... i have some clients running application over TS and i
>> need to access for administration.
>>
>>> Is the server a member server in a domain, or a Domain
>>> Controller?
>>
>> It is a Domain Controller
>>
>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
>> escribió en el mensaje
>> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...
>>> Is your server running Remote Desktop for Administration or
>>> full- blown Terminal Services?
>>> Is the server a member server in a domain, or a Domain
>>> Controller?
>>>
>>> _________________________________________________________
>>> Vera Noest
>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>> TS troubleshooting: http://ts.veranoest.net
>>> ___ please respond in newsgroup, NOT by private email ___
>>>
>>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul
>>> 2007 in microsoft.public.windows.terminal_services:
>>>
>>>> I have a problem, when i want to configure a user to access to
>>>> RD, by giving them into the group "Remote Desktop Users", the
>>>> users can not access, receiving a message indicating that they
>>>> no have the correct permision and meybe if i put them into the
>>>> group of "Remote Desktop Users" they can have access to RD.
>>>>
>>>> If i put the users into Administrators Users Group then all of
>>>> them have the rigth access.
>>>>
>>>> I will appreciate any help you can give me.
>>>>
>>>>
>>>> Juan Carlos Flores
>>>> Choluteca Honduras.

 

[Vera Noest [MVP]]

Check this setting in the Default Domain Controller Policy:
Computer Configuration - Windows Settings - Security Settings - Local
Policies - User rights Assignment
"Allow log on through Terminal Services"

Make sure that the BUILTIN\Remote Desktop Users group is a member of
the list
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 11 jul 2007
in microsoft.public.windows.terminal_services:

> I've tried a lot with that with no results.
>
> Really the same server as DC and Data server and application
> server is not a risk situation for me cause is just a few users
> that has the necesity to do this, but i need that these user can
> access to the TS only as member of RD Users Group, but that is
> imposible for me at this moment i don't know why. Only the
> Administrators member can access by TS.
>
>
> Regards
>
> Juan Carlos Flores
> Choluteca, Honduras
>
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
> escribió en el mensaje
> news:Xns9969EB6C3F466veranoesthemutforsse@207.46.248.16...
>> OK, I assume that you know that running TS on a Domain
>> Controller is *not* recommended, for both performance and
>> security reasons. By installing TS, you configured your Domain
>> Controller as a multi- user workstation. That's a risky
>> situation on a critical server.
>>
>> That said, you'll have to make your users members of the Domain
>> Local built-in group Remote Desktop Users in AD.
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul
>> 2007 in microsoft.public.windows.terminal_services:
>>
>>>> Is your server running Remote Desktop for Administration or
>>>> full- blown Terminal Services?
>>>
>>> Both... i have some clients running application over TS and i
>>> need to access for administration.
>>>
>>>> Is the server a member server in a domain, or a Domain
>>>> Controller?
>>>
>>> It is a Domain Controller
>>>
>>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>
>>> escribió en el mensaje
>>> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...
>>>> Is your server running Remote Desktop for Administration or
>>>> full- blown Terminal Services?
>>>> Is the server a member server in a domain, or a Domain
>>>> Controller?
>>>>
>>>> _________________________________________________________
>>>> Vera Noest
>>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>>> TS troubleshooting: http://ts.veranoest.net
>>>> ___ please respond in newsgroup, NOT by private email ___
>>>>
>>>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul
>>>> 2007 in microsoft.public.windows.terminal_services:
>>>>
>>>>> I have a problem, when i want to configure a user to access
>>>>> to RD, by giving them into the group "Remote Desktop Users",
>>>>> the users can not access, receiving a message indicating
>>>>> that they no have the correct permision and meybe if i put
>>>>> them into the group of "Remote Desktop Users" they can have
>>>>> access to RD.
>>>>>
>>>>> If i put the users into Administrators Users Group then all
>>>>> of them have the rigth access.
>>>>>
>>>>> I will appreciate any help you can give me.
>>>>>
>>>>>
>>>>> Juan Carlos Flores
>>>>> Choluteca Honduras.