users can not access TS PLEASE HELP

R

Rene B

Sorry that I post it again, but my boss is pushing for a solution to it, can
sombeody help me !

This is my configuration:

MDC Server1 (TS License Server) (W2k3)
member server Server2 TS Application mode (W2k3) no DC
Licensing: Per User (5 cals installed)
Local Policy: Allow log on through Terminal Services = Administrators,
Remote Desktop Users

User1: member of Domain Users, Remote Desktop User, Administrators
User2: member of Domain Users, Remote Desktop User

non of the users can access TS remotely, users can login locally on TS

error: "To log on this remote computer, you must be granted the Allow Log on
through Terminal Services rigtht. By default , members of the Remote Desktop
Users group have ....."

Event Log after try to connect to TS:
just secuity shows events
Security:
--- LOG 1: ---
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 576
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
Special privileges assigned to new logon:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Privileges: SeSecurityPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeLoadDriverPrivilege
SeImpersonatePrivilege

--- LOG 2 --
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
Successful Network Logon:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:
Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: -
Source Port: -

-- LOG 3 --
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 7/24/2007
Time: 10:43:06 AM
User: NT AUTHORITY\SYSTEM
Computer: TPISAPPSVR01
Description:
User Logoff:
User Name: TPISAPPSVR01$
Domain: TPIS
Logon ID: (0x0,0x98CDE)
Logon Type: 3



What else should I do?


Thanks Jeff


"Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message
news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
> This is a win2k3 server correct? is it a domain controller? What error
> message are they receiving when they try to connect? What do the event
> logs show when they connect?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> Rene B wrote:
>> Hello everybody,
>>
>> I have problem accessing TS with RDC as any other user diferent than
>> administrator even if the user is part of the administrators group.
>>
>>
 
V

Vera Noest [MVP]

Has this ever worked before?
If yes, when did it stop working? What was changed on the server or
in the domain immediately prior to this problem?
And have you checked if there are other Group Policies in the
domain which override your local policy?
Use resultant Set of Policies to see all GPOs which affect your
users.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 24
jul 2007 in microsoft.public.windows.terminal_services:

> Sorry that I post it again, but my boss is pushing for a
> solution to it, can sombeody help me !
>
> This is my configuration:
>
> MDC Server1 (TS License Server) (W2k3)
> member server Server2 TS Application mode (W2k3) no DC
> Licensing: Per User (5 cals installed)
> Local Policy: Allow log on through Terminal Services =
> Administrators, Remote Desktop Users
>
> User1: member of Domain Users, Remote Desktop User,
> Administrators User2: member of Domain Users, Remote Desktop
> User
>
> non of the users can access TS remotely, users can login locally
> on TS
>
> error: "To log on this remote computer, you must be granted the
> Allow Log on through Terminal Services rigtht. By default ,
> members of the Remote Desktop Users group have ....."
>
> Event Log after try to connect to TS:
> just secuity shows events
> Security:
> --- LOG 1: ---
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 576
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> Special privileges assigned to new logon:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Privileges: SeSecurityPrivilege
> SeBackupPrivilege
> SeRestorePrivilege
> SeTakeOwnershipPrivilege
> SeDebugPrivilege
> SeSystemEnvironmentPrivilege
> SeLoadDriverPrivilege
> SeImpersonatePrivilege
>
> --- LOG 2 --
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 540
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> Successful Network Logon:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Logon Type: 3
> Logon Process: Kerberos
> Authentication Package: Kerberos
> Workstation Name:
> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
> Caller User Name: -
> Caller Domain: -
> Caller Logon ID: -
> Caller Process ID: -
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
> -- LOG 3 --
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 538
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> User Logoff:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Logon Type: 3
>
>
>
> What else should I do?
>
>
> Thanks Jeff
>
>
> "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message
> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>> This is a win2k3 server correct? is it a domain controller?
>> What error message are they receiving when they try to connect?
>> What do the event logs show when they connect?
>>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Server
>> Citrix Technology Professional
>> Provision Networks VIP
>>
>> Forums not enough?
>> Get support from the experts at your business
>> http://jeffpitschconsulting.com
>>
>> Rene B wrote:
>>> Hello everybody,
>>>
>>> I have problem accessing TS with RDC as any other user
>>> diferent than administrator even if the user is part of the
>>> administrators group.
 
R

roberto.reynoso@gmail.com

Please let me know if you still need help with? I might be able to
help based on the email below.

I will check my email first thing tomorrow morning 07/24/02

Roberto

On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
no...@beckerstaxservice.com> wrote:
> Sorry that I post it again, but my boss is pushing for a solution to it, can
> sombeody help me !
>
> This is my configuration:
>
> MDC Server1 (TS License Server) (W2k3)
> member server Server2 TS Application mode (W2k3) no DC
> Licensing: Per User (5 cals installed)
> Local Policy: Allow log on through Terminal Services = Administrators,
> Remote Desktop Users
>
> User1: member of Domain Users, Remote Desktop User, Administrators
> User2: member of Domain Users, Remote Desktop User
>
> non of the users can access TS remotely, users can login locally on TS
>
> error: "To log on this remote computer, you must be granted the Allow Log on
> through Terminal Services rigtht. By default , members of the Remote Desktop
> Users group have ....."
>
> Event Log after try to connect to TS:
> just secuity shows events
> Security:
> --- LOG 1: ---
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 576
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> Special privileges assigned to new logon:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Privileges: SeSecurityPrivilege
> SeBackupPrivilege
> SeRestorePrivilege
> SeTakeOwnershipPrivilege
> SeDebugPrivilege
> SeSystemEnvironmentPrivilege
> SeLoadDriverPrivilege
> SeImpersonatePrivilege
>
> --- LOG 2 --
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 540
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> Successful Network Logon:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Logon Type: 3
> Logon Process: Kerberos
> Authentication Package: Kerberos
> Workstation Name:
> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
> Caller User Name: -
> Caller Domain: -
> Caller Logon ID: -
> Caller Process ID: -
> Transited Services: -
> Source Network Address: -
> Source Port: -
>
> -- LOG 3 --
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 538
> Date: 7/24/2007
> Time: 10:43:06 AM
> User: NT AUTHORITY\SYSTEM
> Computer: TPISAPPSVR01
> Description:
> User Logoff:
> User Name: TPISAPPSVR01$
> Domain: TPIS
> Logon ID: (0x0,0x98CDE)
> Logon Type: 3
>
> What else should I do?
>
> Thanks Jeff
>
> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message
>
> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>
>
>
> > This is a win2k3 server correct? is it a domain controller? What error
> > message are they receiving when they try to connect? What do the event
> > logs show when they connect?
>
> > Jeff Pitsch
> > Microsoft MVP - Terminal Server
> > Citrix Technology Professional
> > Provision Networks VIP
>
> > Forums not enough?
> > Get support from the experts at your business
> >http://jeffpitschconsulting.com
>
> > Rene B wrote:
> >> Hello everybody,
>
> >> I have problem accessing TS with RDC as any other user diferent than
> >> administrator even if the user is part of the administrators group.- Hide quoted text -
>
> - Show quoted text -
 
R

Rene B

these are new server, they never worked before.
I dindn't make any changes on the policies, I'm using the default domain
policy.

Thanks

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9977EE070245Dveranoesthemutforsse@207.46.248.16...
> Has this ever worked before?
> If yes, when did it stop working? What was changed on the server or
> in the domain immediately prior to this problem?
> And have you checked if there are other Group Policies in the
> domain which override your local policy?
> Use resultant Set of Policies to see all GPOs which affect your
> users.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 24
> jul 2007 in microsoft.public.windows.terminal_services:
>
>> Sorry that I post it again, but my boss is pushing for a
>> solution to it, can sombeody help me !
>>
>> This is my configuration:
>>
>> MDC Server1 (TS License Server) (W2k3)
>> member server Server2 TS Application mode (W2k3) no DC
>> Licensing: Per User (5 cals installed)
>> Local Policy: Allow log on through Terminal Services =
>> Administrators, Remote Desktop Users
>>
>> User1: member of Domain Users, Remote Desktop User,
>> Administrators User2: member of Domain Users, Remote Desktop
>> User
>>
>> non of the users can access TS remotely, users can login locally
>> on TS
>>
>> error: "To log on this remote computer, you must be granted the
>> Allow Log on through Terminal Services rigtht. By default ,
>> members of the Remote Desktop Users group have ....."
>>
>> Event Log after try to connect to TS:
>> just secuity shows events
>> Security:
>> --- LOG 1: ---
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 576
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> Special privileges assigned to new logon:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Privileges: SeSecurityPrivilege
>> SeBackupPrivilege
>> SeRestorePrivilege
>> SeTakeOwnershipPrivilege
>> SeDebugPrivilege
>> SeSystemEnvironmentPrivilege
>> SeLoadDriverPrivilege
>> SeImpersonatePrivilege
>>
>> --- LOG 2 --
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 540
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> Successful Network Logon:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Logon Type: 3
>> Logon Process: Kerberos
>> Authentication Package: Kerberos
>> Workstation Name:
>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>> Caller User Name: -
>> Caller Domain: -
>> Caller Logon ID: -
>> Caller Process ID: -
>> Transited Services: -
>> Source Network Address: -
>> Source Port: -
>>
>> -- LOG 3 --
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 538
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> User Logoff:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Logon Type: 3
>>
>>
>>
>> What else should I do?
>>
>>
>> Thanks Jeff
>>
>>
>> "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message
>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>> This is a win2k3 server correct? is it a domain controller?
>>> What error message are they receiving when they try to connect?
>>> What do the event logs show when they connect?
>>>
>>> Jeff Pitsch
>>> Microsoft MVP - Terminal Server
>>> Citrix Technology Professional
>>> Provision Networks VIP
>>>
>>> Forums not enough?
>>> Get support from the experts at your business
>>> http://jeffpitschconsulting.com
>>>
>>> Rene B wrote:
>>>> Hello everybody,
>>>>
>>>> I have problem accessing TS with RDC as any other user
>>>> diferent than administrator even if the user is part of the
>>>> administrators group.
 
R

Rene B

Still having the problem,

Thanks

<roberto.reynoso@gmail.com> wrote in message
news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
> Please let me know if you still need help with? I might be able to
> help based on the email below.
>
> I will check my email first thing tomorrow morning 07/24/02
>
> Roberto
>
> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
> no...@beckerstaxservice.com> wrote:
>> Sorry that I post it again, but my boss is pushing for a solution to it,
>> can
>> sombeody help me !
>>
>> This is my configuration:
>>
>> MDC Server1 (TS License Server) (W2k3)
>> member server Server2 TS Application mode (W2k3) no DC
>> Licensing: Per User (5 cals installed)
>> Local Policy: Allow log on through Terminal Services = Administrators,
>> Remote Desktop Users
>>
>> User1: member of Domain Users, Remote Desktop User, Administrators
>> User2: member of Domain Users, Remote Desktop User
>>
>> non of the users can access TS remotely, users can login locally on TS
>>
>> error: "To log on this remote computer, you must be granted the Allow Log
>> on
>> through Terminal Services rigtht. By default , members of the Remote
>> Desktop
>> Users group have ....."
>>
>> Event Log after try to connect to TS:
>> just secuity shows events
>> Security:
>> --- LOG 1: ---
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 576
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> Special privileges assigned to new logon:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Privileges: SeSecurityPrivilege
>> SeBackupPrivilege
>> SeRestorePrivilege
>> SeTakeOwnershipPrivilege
>> SeDebugPrivilege
>> SeSystemEnvironmentPrivilege
>> SeLoadDriverPrivilege
>> SeImpersonatePrivilege
>>
>> --- LOG 2 --
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 540
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> Successful Network Logon:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Logon Type: 3
>> Logon Process: Kerberos
>> Authentication Package: Kerberos
>> Workstation Name:
>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>> Caller User Name: -
>> Caller Domain: -
>> Caller Logon ID: -
>> Caller Process ID: -
>> Transited Services: -
>> Source Network Address: -
>> Source Port: -
>>
>> -- LOG 3 --
>> Event Type: Success Audit
>> Event Source: Security
>> Event Category: Logon/Logoff
>> Event ID: 538
>> Date: 7/24/2007
>> Time: 10:43:06 AM
>> User: NT AUTHORITY\SYSTEM
>> Computer: TPISAPPSVR01
>> Description:
>> User Logoff:
>> User Name: TPISAPPSVR01$
>> Domain: TPIS
>> Logon ID: (0x0,0x98CDE)
>> Logon Type: 3
>>
>> What else should I do?
>>
>> Thanks Jeff
>>
>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message
>>
>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>
>>
>>
>> > This is a win2k3 server correct? is it a domain controller? What
>> > error
>> > message are they receiving when they try to connect? What do the event
>> > logs show when they connect?
>>
>> > Jeff Pitsch
>> > Microsoft MVP - Terminal Server
>> > Citrix Technology Professional
>> > Provision Networks VIP
>>
>> > Forums not enough?
>> > Get support from the experts at your business
>> >http://jeffpitschconsulting.com
>>
>> > Rene B wrote:
>> >> Hello everybody,
>>
>> >> I have problem accessing TS with RDC as any other user diferent than
>> >> administrator even if the user is part of the administrators group.-
>> >> Hide quoted text -
>>
>> - Show quoted text -
>
>
 
S

Soo Kuan Teo [MSFT]

Rene,
you have:
"User1: member of Domain Users, Remote Desktop User, Administrators"
"User2: member of Domain Users, Remote Desktop User"

do you mean you added User1 and User1 to Server2 as Remote Desktop users,
and User1 to Server2 as Administrators? If its true, you're doing the right
thing, you should be able to ts to Server2 with User1 and User2.

What are your client machines OS and hardware?


Thanks
Soo Kuan





--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in message
news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
> Still having the problem,
>
> Thanks
>
> <roberto.reynoso@gmail.com> wrote in message
> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>> Please let me know if you still need help with? I might be able to
>> help based on the email below.
>>
>> I will check my email first thing tomorrow morning 07/24/02
>>
>> Roberto
>>
>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>> no...@beckerstaxservice.com> wrote:
>>> Sorry that I post it again, but my boss is pushing for a solution to it,
>>> can
>>> sombeody help me !
>>>
>>> This is my configuration:
>>>
>>> MDC Server1 (TS License Server) (W2k3)
>>> member server Server2 TS Application mode (W2k3) no DC
>>> Licensing: Per User (5 cals installed)
>>> Local Policy: Allow log on through Terminal Services = Administrators,
>>> Remote Desktop Users
>>>
>>> User1: member of Domain Users, Remote Desktop User, Administrators
>>> User2: member of Domain Users, Remote Desktop User
>>>
>>> non of the users can access TS remotely, users can login locally on TS
>>>
>>> error: "To log on this remote computer, you must be granted the Allow
>>> Log on
>>> through Terminal Services rigtht. By default , members of the Remote
>>> Desktop
>>> Users group have ....."
>>>
>>> Event Log after try to connect to TS:
>>> just secuity shows events
>>> Security:
>>> --- LOG 1: ---
>>> Event Type: Success Audit
>>> Event Source: Security
>>> Event Category: Logon/Logoff
>>> Event ID: 576
>>> Date: 7/24/2007
>>> Time: 10:43:06 AM
>>> User: NT AUTHORITY\SYSTEM
>>> Computer: TPISAPPSVR01
>>> Description:
>>> Special privileges assigned to new logon:
>>> User Name: TPISAPPSVR01$
>>> Domain: TPIS
>>> Logon ID: (0x0,0x98CDE)
>>> Privileges: SeSecurityPrivilege
>>> SeBackupPrivilege
>>> SeRestorePrivilege
>>> SeTakeOwnershipPrivilege
>>> SeDebugPrivilege
>>> SeSystemEnvironmentPrivilege
>>> SeLoadDriverPrivilege
>>> SeImpersonatePrivilege
>>>
>>> --- LOG 2 --
>>> Event Type: Success Audit
>>> Event Source: Security
>>> Event Category: Logon/Logoff
>>> Event ID: 540
>>> Date: 7/24/2007
>>> Time: 10:43:06 AM
>>> User: NT AUTHORITY\SYSTEM
>>> Computer: TPISAPPSVR01
>>> Description:
>>> Successful Network Logon:
>>> User Name: TPISAPPSVR01$
>>> Domain: TPIS
>>> Logon ID: (0x0,0x98CDE)
>>> Logon Type: 3
>>> Logon Process: Kerberos
>>> Authentication Package: Kerberos
>>> Workstation Name:
>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>> Caller User Name: -
>>> Caller Domain: -
>>> Caller Logon ID: -
>>> Caller Process ID: -
>>> Transited Services: -
>>> Source Network Address: -
>>> Source Port: -
>>>
>>> -- LOG 3 --
>>> Event Type: Success Audit
>>> Event Source: Security
>>> Event Category: Logon/Logoff
>>> Event ID: 538
>>> Date: 7/24/2007
>>> Time: 10:43:06 AM
>>> User: NT AUTHORITY\SYSTEM
>>> Computer: TPISAPPSVR01
>>> Description:
>>> User Logoff:
>>> User Name: TPISAPPSVR01$
>>> Domain: TPIS
>>> Logon ID: (0x0,0x98CDE)
>>> Logon Type: 3
>>>
>>> What else should I do?
>>>
>>> Thanks Jeff
>>>
>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message
>>>
>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>
>>>
>>>
>>> > This is a win2k3 server correct? is it a domain controller? What
>>> > error
>>> > message are they receiving when they try to connect? What do the
>>> > event
>>> > logs show when they connect?
>>>
>>> > Jeff Pitsch
>>> > Microsoft MVP - Terminal Server
>>> > Citrix Technology Professional
>>> > Provision Networks VIP
>>>
>>> > Forums not enough?
>>> > Get support from the experts at your business
>>> >http://jeffpitschconsulting.com
>>>
>>> > Rene B wrote:
>>> >> Hello everybody,
>>>
>>> >> I have problem accessing TS with RDC as any other user diferent than
>>> >> administrator even if the user is part of the administrators group.-
>>> >> Hide quoted text -
>>>
>>> - Show quoted text -
>>
>>
>
>
 
R

Rene B

IT is Windows XP sp2.

I found a problem, when I tried to check the Linceses on the server
(Administrative Tools/Licensing) I got an error:

"The License Logging Service is not running on \\servidor.domain01.local, or
\\servidor.domain01.local is not accessible."

The same error I got in both servers.

Thanks

"Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in message
news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl...
> Rene,
> you have:
> "User1: member of Domain Users, Remote Desktop User, Administrators"
> "User2: member of Domain Users, Remote Desktop User"
>
> do you mean you added User1 and User1 to Server2 as Remote Desktop users,
> and User1 to Server2 as Administrators? If its true, you're doing the
> right thing, you should be able to ts to Server2 with User1 and User2.
>
> What are your client machines OS and hardware?
>
>
> Thanks
> Soo Kuan
>
>
>
>
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in message
> news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
>> Still having the problem,
>>
>> Thanks
>>
>> <roberto.reynoso@gmail.com> wrote in message
>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>>> Please let me know if you still need help with? I might be able to
>>> help based on the email below.
>>>
>>> I will check my email first thing tomorrow morning 07/24/02
>>>
>>> Roberto
>>>
>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>>> no...@beckerstaxservice.com> wrote:
>>>> Sorry that I post it again, but my boss is pushing for a solution to
>>>> it, can
>>>> sombeody help me !
>>>>
>>>> This is my configuration:
>>>>
>>>> MDC Server1 (TS License Server) (W2k3)
>>>> member server Server2 TS Application mode (W2k3) no DC
>>>> Licensing: Per User (5 cals installed)
>>>> Local Policy: Allow log on through Terminal Services = Administrators,
>>>> Remote Desktop Users
>>>>
>>>> User1: member of Domain Users, Remote Desktop User, Administrators
>>>> User2: member of Domain Users, Remote Desktop User
>>>>
>>>> non of the users can access TS remotely, users can login locally on TS
>>>>
>>>> error: "To log on this remote computer, you must be granted the Allow
>>>> Log on
>>>> through Terminal Services rigtht. By default , members of the Remote
>>>> Desktop
>>>> Users group have ....."
>>>>
>>>> Event Log after try to connect to TS:
>>>> just secuity shows events
>>>> Security:
>>>> --- LOG 1: ---
>>>> Event Type: Success Audit
>>>> Event Source: Security
>>>> Event Category: Logon/Logoff
>>>> Event ID: 576
>>>> Date: 7/24/2007
>>>> Time: 10:43:06 AM
>>>> User: NT AUTHORITY\SYSTEM
>>>> Computer: TPISAPPSVR01
>>>> Description:
>>>> Special privileges assigned to new logon:
>>>> User Name: TPISAPPSVR01$
>>>> Domain: TPIS
>>>> Logon ID: (0x0,0x98CDE)
>>>> Privileges: SeSecurityPrivilege
>>>> SeBackupPrivilege
>>>> SeRestorePrivilege
>>>> SeTakeOwnershipPrivilege
>>>> SeDebugPrivilege
>>>> SeSystemEnvironmentPrivilege
>>>> SeLoadDriverPrivilege
>>>> SeImpersonatePrivilege
>>>>
>>>> --- LOG 2 --
>>>> Event Type: Success Audit
>>>> Event Source: Security
>>>> Event Category: Logon/Logoff
>>>> Event ID: 540
>>>> Date: 7/24/2007
>>>> Time: 10:43:06 AM
>>>> User: NT AUTHORITY\SYSTEM
>>>> Computer: TPISAPPSVR01
>>>> Description:
>>>> Successful Network Logon:
>>>> User Name: TPISAPPSVR01$
>>>> Domain: TPIS
>>>> Logon ID: (0x0,0x98CDE)
>>>> Logon Type: 3
>>>> Logon Process: Kerberos
>>>> Authentication Package: Kerberos
>>>> Workstation Name:
>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>>> Caller User Name: -
>>>> Caller Domain: -
>>>> Caller Logon ID: -
>>>> Caller Process ID: -
>>>> Transited Services: -
>>>> Source Network Address: -
>>>> Source Port: -
>>>>
>>>> -- LOG 3 --
>>>> Event Type: Success Audit
>>>> Event Source: Security
>>>> Event Category: Logon/Logoff
>>>> Event ID: 538
>>>> Date: 7/24/2007
>>>> Time: 10:43:06 AM
>>>> User: NT AUTHORITY\SYSTEM
>>>> Computer: TPISAPPSVR01
>>>> Description:
>>>> User Logoff:
>>>> User Name: TPISAPPSVR01$
>>>> Domain: TPIS
>>>> Logon ID: (0x0,0x98CDE)
>>>> Logon Type: 3
>>>>
>>>> What else should I do?
>>>>
>>>> Thanks Jeff
>>>>
>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message
>>>>
>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>>
>>>>
>>>>
>>>> > This is a win2k3 server correct? is it a domain controller? What
>>>> > error
>>>> > message are they receiving when they try to connect? What do the
>>>> > event
>>>> > logs show when they connect?
>>>>
>>>> > Jeff Pitsch
>>>> > Microsoft MVP - Terminal Server
>>>> > Citrix Technology Professional
>>>> > Provision Networks VIP
>>>>
>>>> > Forums not enough?
>>>> > Get support from the experts at your business
>>>> >http://jeffpitschconsulting.com
>>>>
>>>> > Rene B wrote:
>>>> >> Hello everybody,
>>>>
>>>> >> I have problem accessing TS with RDC as any other user diferent than
>>>> >> administrator even if the user is part of the administrators group.-
>>>> >> Hide quoted text -
>>>>
>>>> - Show quoted text -
>>>
>>>
>>
>>
>
 
V

Vera Noest [MVP]

That's the service which keeps track of the Windows CALs (not the
Terminal Server CALs). It's notorious for its false alarms, and
should be stopped and disabled on all 2003 servers. You need to
have enough server CALs, of course.

Documented here:

824196 - Description of the License Logging Service in Windows
Server Operating Systems
http://support.microsoft.com/?kbid=824196

But this should be the default, at least on 2003 SP1 and later.
Which SP are you running on these servers?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 25
jul 2007 in microsoft.public.windows.terminal_services:

> IT is Windows XP sp2.
>
> I found a problem, when I tried to check the Linceses on the
> server (Administrative Tools/Licensing) I got an error:
>
> "The License Logging Service is not running on
> \\servidor.domain01.local, or \\servidor.domain01.local is not
> accessible."
>
> The same error I got in both servers.
>
> Thanks
>
> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in
> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl...
>> Rene,
>> you have:
>> "User1: member of Domain Users, Remote Desktop User,
>> Administrators" "User2: member of Domain Users, Remote
>> Desktop User"
>>
>> do you mean you added User1 and User1 to Server2 as Remote
>> Desktop users, and User1 to Server2 as Administrators? If its
>> true, you're doing the right thing, you should be able to ts to
>> Server2 with User1 and User2.
>>
>> What are your client machines OS and hardware?
>>
>>
>> Thanks
>> Soo Kuan
>>
>>
>>
>>
>>
>> --
>> This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>>
>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in
>> message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
>>> Still having the problem,
>>>
>>> Thanks
>>>
>>> <roberto.reynoso@gmail.com> wrote in message
>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>>>> Please let me know if you still need help with? I might be
>>>> able to help based on the email below.
>>>>
>>>> I will check my email first thing tomorrow morning 07/24/02
>>>>
>>>> Roberto
>>>>
>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>>>> no...@beckerstaxservice.com> wrote:
>>>>> Sorry that I post it again, but my boss is pushing for a
>>>>> solution to it, can
>>>>> sombeody help me !
>>>>>
>>>>> This is my configuration:
>>>>>
>>>>> MDC Server1 (TS License Server) (W2k3)
>>>>> member server Server2 TS Application mode (W2k3) no DC
>>>>> Licensing: Per User (5 cals installed)
>>>>> Local Policy: Allow log on through Terminal Services =
>>>>> Administrators, Remote Desktop Users
>>>>>
>>>>> User1: member of Domain Users, Remote Desktop User,
>>>>> Administrators User2: member of Domain Users, Remote Desktop
>>>>> User
>>>>>
>>>>> non of the users can access TS remotely, users can login
>>>>> locally on TS
>>>>>
>>>>> error: "To log on this remote computer, you must be granted
>>>>> the Allow Log on
>>>>> through Terminal Services rigtht. By default , members of
>>>>> the Remote Desktop
>>>>> Users group have ....."
>>>>>
>>>>> Event Log after try to connect to TS:
>>>>> just secuity shows events
>>>>> Security:
>>>>> --- LOG 1: ---
>>>>> Event Type: Success Audit
>>>>> Event Source: Security
>>>>> Event Category: Logon/Logoff
>>>>> Event ID: 576
>>>>> Date: 7/24/2007
>>>>> Time: 10:43:06 AM
>>>>> User: NT AUTHORITY\SYSTEM
>>>>> Computer: TPISAPPSVR01
>>>>> Description:
>>>>> Special privileges assigned to new logon:
>>>>> User Name: TPISAPPSVR01$
>>>>> Domain: TPIS
>>>>> Logon ID: (0x0,0x98CDE)
>>>>> Privileges: SeSecurityPrivilege
>>>>> SeBackupPrivilege
>>>>> SeRestorePrivilege
>>>>> SeTakeOwnershipPrivilege
>>>>> SeDebugPrivilege
>>>>> SeSystemEnvironmentPrivilege
>>>>> SeLoadDriverPrivilege
>>>>> SeImpersonatePrivilege
>>>>>
>>>>> --- LOG 2 --
>>>>> Event Type: Success Audit
>>>>> Event Source: Security
>>>>> Event Category: Logon/Logoff
>>>>> Event ID: 540
>>>>> Date: 7/24/2007
>>>>> Time: 10:43:06 AM
>>>>> User: NT AUTHORITY\SYSTEM
>>>>> Computer: TPISAPPSVR01
>>>>> Description:
>>>>> Successful Network Logon:
>>>>> User Name: TPISAPPSVR01$
>>>>> Domain: TPIS
>>>>> Logon ID: (0x0,0x98CDE)
>>>>> Logon Type: 3
>>>>> Logon Process: Kerberos
>>>>> Authentication Package: Kerberos
>>>>> Workstation Name:
>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>>>> Caller User Name: -
>>>>> Caller Domain: -
>>>>> Caller Logon ID: -
>>>>> Caller Process ID: -
>>>>> Transited Services: -
>>>>> Source Network Address: -
>>>>> Source Port: -
>>>>>
>>>>> -- LOG 3 --
>>>>> Event Type: Success Audit
>>>>> Event Source: Security
>>>>> Event Category: Logon/Logoff
>>>>> Event ID: 538
>>>>> Date: 7/24/2007
>>>>> Time: 10:43:06 AM
>>>>> User: NT AUTHORITY\SYSTEM
>>>>> Computer: TPISAPPSVR01
>>>>> Description:
>>>>> User Logoff:
>>>>> User Name: TPISAPPSVR01$
>>>>> Domain: TPIS
>>>>> Logon ID: (0x0,0x98CDE)
>>>>> Logon Type: 3
>>>>>
>>>>> What else should I do?
>>>>>
>>>>> Thanks Jeff
>>>>>
>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in
>>>>> message
>>>>>
>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>>>
>>>>>
>>>>>
>>>>> > This is a win2k3 server correct? is it a domain
>>>>> > controller? What error
>>>>> > message are they receiving when they try to connect? What
>>>>> > do the event
>>>>> > logs show when they connect?
>>>>>
>>>>> > Jeff Pitsch
>>>>> > Microsoft MVP - Terminal Server
>>>>> > Citrix Technology Professional
>>>>> > Provision Networks VIP
>>>>>
>>>>> > Forums not enough?
>>>>> > Get support from the experts at your business
>>>>> >http://jeffpitschconsulting.com
>>>>>
>>>>> > Rene B wrote:
>>>>> >> Hello everybody,
>>>>>
>>>>> >> I have problem accessing TS with RDC as any other user
>>>>> >> diferent than administrator even if the user is part of
>>>>> >> the administrators group.- Hide quoted text -
>>>>>
>>>>> - Show quoted text -
 
R

Rene B

I got about the License Logging service, thanks.

Yes I check the termianls server licensing and every thing is ok (active and
running) I have user 5 cals installed already.


"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16...
> That's the service which keeps track of the Windows CALs (not the
> Terminal Server CALs). It's notorious for its false alarms, and
> should be stopped and disabled on all 2003 servers. You need to
> have enough server CALs, of course.
>
> Documented here:
>
> 824196 - Description of the License Logging Service in Windows
> Server Operating Systems
> http://support.microsoft.com/?kbid=824196
>
> But this should be the default, at least on 2003 SP1 and later.
> Which SP are you running on these servers?
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 25
> jul 2007 in microsoft.public.windows.terminal_services:
>
>> IT is Windows XP sp2.
>>
>> I found a problem, when I tried to check the Linceses on the
>> server (Administrative Tools/Licensing) I got an error:
>>
>> "The License Logging Service is not running on
>> \\servidor.domain01.local, or \\servidor.domain01.local is not
>> accessible."
>>
>> The same error I got in both servers.
>>
>> Thanks
>>
>> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in
>> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl...
>>> Rene,
>>> you have:
>>> "User1: member of Domain Users, Remote Desktop User,
>>> Administrators" "User2: member of Domain Users, Remote
>>> Desktop User"
>>>
>>> do you mean you added User1 and User1 to Server2 as Remote
>>> Desktop users, and User1 to Server2 as Administrators? If its
>>> true, you're doing the right thing, you should be able to ts to
>>> Server2 with User1 and User2.
>>>
>>> What are your client machines OS and hardware?
>>>
>>>
>>> Thanks
>>> Soo Kuan
>>>
>>>
>>>
>>>
>>>
>>> --
>>> This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>>
>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in
>>> message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
>>>> Still having the problem,
>>>>
>>>> Thanks
>>>>
>>>> <roberto.reynoso@gmail.com> wrote in message
>>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>>>>> Please let me know if you still need help with? I might be
>>>>> able to help based on the email below.
>>>>>
>>>>> I will check my email first thing tomorrow morning 07/24/02
>>>>>
>>>>> Roberto
>>>>>
>>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>>>>> no...@beckerstaxservice.com> wrote:
>>>>>> Sorry that I post it again, but my boss is pushing for a
>>>>>> solution to it, can
>>>>>> sombeody help me !
>>>>>>
>>>>>> This is my configuration:
>>>>>>
>>>>>> MDC Server1 (TS License Server) (W2k3)
>>>>>> member server Server2 TS Application mode (W2k3) no DC
>>>>>> Licensing: Per User (5 cals installed)
>>>>>> Local Policy: Allow log on through Terminal Services =
>>>>>> Administrators, Remote Desktop Users
>>>>>>
>>>>>> User1: member of Domain Users, Remote Desktop User,
>>>>>> Administrators User2: member of Domain Users, Remote Desktop
>>>>>> User
>>>>>>
>>>>>> non of the users can access TS remotely, users can login
>>>>>> locally on TS
>>>>>>
>>>>>> error: "To log on this remote computer, you must be granted
>>>>>> the Allow Log on
>>>>>> through Terminal Services rigtht. By default , members of
>>>>>> the Remote Desktop
>>>>>> Users group have ....."
>>>>>>
>>>>>> Event Log after try to connect to TS:
>>>>>> just secuity shows events
>>>>>> Security:
>>>>>> --- LOG 1: ---
>>>>>> Event Type: Success Audit
>>>>>> Event Source: Security
>>>>>> Event Category: Logon/Logoff
>>>>>> Event ID: 576
>>>>>> Date: 7/24/2007
>>>>>> Time: 10:43:06 AM
>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>> Computer: TPISAPPSVR01
>>>>>> Description:
>>>>>> Special privileges assigned to new logon:
>>>>>> User Name: TPISAPPSVR01$
>>>>>> Domain: TPIS
>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>> Privileges: SeSecurityPrivilege
>>>>>> SeBackupPrivilege
>>>>>> SeRestorePrivilege
>>>>>> SeTakeOwnershipPrivilege
>>>>>> SeDebugPrivilege
>>>>>> SeSystemEnvironmentPrivilege
>>>>>> SeLoadDriverPrivilege
>>>>>> SeImpersonatePrivilege
>>>>>>
>>>>>> --- LOG 2 --
>>>>>> Event Type: Success Audit
>>>>>> Event Source: Security
>>>>>> Event Category: Logon/Logoff
>>>>>> Event ID: 540
>>>>>> Date: 7/24/2007
>>>>>> Time: 10:43:06 AM
>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>> Computer: TPISAPPSVR01
>>>>>> Description:
>>>>>> Successful Network Logon:
>>>>>> User Name: TPISAPPSVR01$
>>>>>> Domain: TPIS
>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>> Logon Type: 3
>>>>>> Logon Process: Kerberos
>>>>>> Authentication Package: Kerberos
>>>>>> Workstation Name:
>>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>>>>> Caller User Name: -
>>>>>> Caller Domain: -
>>>>>> Caller Logon ID: -
>>>>>> Caller Process ID: -
>>>>>> Transited Services: -
>>>>>> Source Network Address: -
>>>>>> Source Port: -
>>>>>>
>>>>>> -- LOG 3 --
>>>>>> Event Type: Success Audit
>>>>>> Event Source: Security
>>>>>> Event Category: Logon/Logoff
>>>>>> Event ID: 538
>>>>>> Date: 7/24/2007
>>>>>> Time: 10:43:06 AM
>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>> Computer: TPISAPPSVR01
>>>>>> Description:
>>>>>> User Logoff:
>>>>>> User Name: TPISAPPSVR01$
>>>>>> Domain: TPIS
>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>> Logon Type: 3
>>>>>>
>>>>>> What else should I do?
>>>>>>
>>>>>> Thanks Jeff
>>>>>>
>>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in
>>>>>> message
>>>>>>
>>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>>>>
>>>>>>
>>>>>>
>>>>>> > This is a win2k3 server correct? is it a domain
>>>>>> > controller? What error
>>>>>> > message are they receiving when they try to connect? What
>>>>>> > do the event
>>>>>> > logs show when they connect?
>>>>>>
>>>>>> > Jeff Pitsch
>>>>>> > Microsoft MVP - Terminal Server
>>>>>> > Citrix Technology Professional
>>>>>> > Provision Networks VIP
>>>>>>
>>>>>> > Forums not enough?
>>>>>> > Get support from the experts at your business
>>>>>> >http://jeffpitschconsulting.com
>>>>>>
>>>>>> > Rene B wrote:
>>>>>> >> Hello everybody,
>>>>>>
>>>>>> >> I have problem accessing TS with RDC as any other user
>>>>>> >> diferent than administrator even if the user is part of
>>>>>> >> the administrators group.- Hide quoted text -
>>>>>>
>>>>>> - Show quoted text -
 
V

Vera Noest [MVP]

I see in a newer post from you that you have solved the
accessibility problem now, is that correct? So we can stop posting
to this thread?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 26
jul 2007 in microsoft.public.windows.terminal_services:

> I got about the License Logging service, thanks.
>
> Yes I check the termianls server licensing and every thing is ok
> (active and running) I have user 5 cals installed already.
>
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
> in message
> news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16...
>> That's the service which keeps track of the Windows CALs (not
>> the Terminal Server CALs). It's notorious for its false alarms,
>> and should be stopped and disabled on all 2003 servers. You
>> need to have enough server CALs, of course.
>>
>> Documented here:
>>
>> 824196 - Description of the License Logging Service in Windows
>> Server Operating Systems
>> http://support.microsoft.com/?kbid=824196
>>
>> But this should be the default, at least on 2003 SP1 and later.
>> Which SP are you running on these servers?
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on
>> 25 jul 2007 in microsoft.public.windows.terminal_services:
>>
>>> IT is Windows XP sp2.
>>>
>>> I found a problem, when I tried to check the Linceses on the
>>> server (Administrative Tools/Licensing) I got an error:
>>>
>>> "The License Logging Service is not running on
>>> \\servidor.domain01.local, or \\servidor.domain01.local is not
>>> accessible."
>>>
>>> The same error I got in both servers.
>>>
>>> Thanks
>>>
>>> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in
>>> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl...
>>>> Rene,
>>>> you have:
>>>> "User1: member of Domain Users, Remote Desktop User,
>>>> Administrators" "User2: member of Domain Users, Remote
>>>> Desktop User"
>>>>
>>>> do you mean you added User1 and User1 to Server2 as Remote
>>>> Desktop users, and User1 to Server2 as Administrators? If its
>>>> true, you're doing the right thing, you should be able to ts
>>>> to Server2 with User1 and User2.
>>>>
>>>> What are your client machines OS and hardware?
>>>>
>>>>
>>>> Thanks
>>>> Soo Kuan
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>>
>>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote
>>>> in message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
>>>>> Still having the problem,
>>>>>
>>>>> Thanks
>>>>>
>>>>> <roberto.reynoso@gmail.com> wrote in message
>>>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>>>>>> Please let me know if you still need help with? I might be
>>>>>> able to help based on the email below.
>>>>>>
>>>>>> I will check my email first thing tomorrow morning 07/24/02
>>>>>>
>>>>>> Roberto
>>>>>>
>>>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>>>>>> no...@beckerstaxservice.com> wrote:
>>>>>>> Sorry that I post it again, but my boss is pushing for a
>>>>>>> solution to it, can
>>>>>>> sombeody help me !
>>>>>>>
>>>>>>> This is my configuration:
>>>>>>>
>>>>>>> MDC Server1 (TS License Server) (W2k3)
>>>>>>> member server Server2 TS Application mode (W2k3) no DC
>>>>>>> Licensing: Per User (5 cals installed)
>>>>>>> Local Policy: Allow log on through Terminal Services =
>>>>>>> Administrators, Remote Desktop Users
>>>>>>>
>>>>>>> User1: member of Domain Users, Remote Desktop User,
>>>>>>> Administrators User2: member of Domain Users, Remote
>>>>>>> Desktop User
>>>>>>>
>>>>>>> non of the users can access TS remotely, users can login
>>>>>>> locally on TS
>>>>>>>
>>>>>>> error: "To log on this remote computer, you must be
>>>>>>> granted the Allow Log on
>>>>>>> through Terminal Services rigtht. By default , members of
>>>>>>> the Remote Desktop
>>>>>>> Users group have ....."
>>>>>>>
>>>>>>> Event Log after try to connect to TS:
>>>>>>> just secuity shows events
>>>>>>> Security:
>>>>>>> --- LOG 1: ---
>>>>>>> Event Type: Success Audit
>>>>>>> Event Source: Security
>>>>>>> Event Category: Logon/Logoff
>>>>>>> Event ID: 576
>>>>>>> Date: 7/24/2007
>>>>>>> Time: 10:43:06 AM
>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>> Computer: TPISAPPSVR01
>>>>>>> Description:
>>>>>>> Special privileges assigned to new logon:
>>>>>>> User Name: TPISAPPSVR01$
>>>>>>> Domain: TPIS
>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>> Privileges: SeSecurityPrivilege
>>>>>>> SeBackupPrivilege
>>>>>>> SeRestorePrivilege
>>>>>>> SeTakeOwnershipPrivilege
>>>>>>> SeDebugPrivilege
>>>>>>> SeSystemEnvironmentPrivilege
>>>>>>> SeLoadDriverPrivilege
>>>>>>> SeImpersonatePrivilege
>>>>>>>
>>>>>>> --- LOG 2 --
>>>>>>> Event Type: Success Audit
>>>>>>> Event Source: Security
>>>>>>> Event Category: Logon/Logoff
>>>>>>> Event ID: 540
>>>>>>> Date: 7/24/2007
>>>>>>> Time: 10:43:06 AM
>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>> Computer: TPISAPPSVR01
>>>>>>> Description:
>>>>>>> Successful Network Logon:
>>>>>>> User Name: TPISAPPSVR01$
>>>>>>> Domain: TPIS
>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>> Logon Type: 3
>>>>>>> Logon Process: Kerberos
>>>>>>> Authentication Package: Kerberos
>>>>>>> Workstation Name:
>>>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>>>>>> Caller User Name: -
>>>>>>> Caller Domain: -
>>>>>>> Caller Logon ID: -
>>>>>>> Caller Process ID: -
>>>>>>> Transited Services: -
>>>>>>> Source Network Address: -
>>>>>>> Source Port: -
>>>>>>>
>>>>>>> -- LOG 3 --
>>>>>>> Event Type: Success Audit
>>>>>>> Event Source: Security
>>>>>>> Event Category: Logon/Logoff
>>>>>>> Event ID: 538
>>>>>>> Date: 7/24/2007
>>>>>>> Time: 10:43:06 AM
>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>> Computer: TPISAPPSVR01
>>>>>>> Description:
>>>>>>> User Logoff:
>>>>>>> User Name: TPISAPPSVR01$
>>>>>>> Domain: TPIS
>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>> Logon Type: 3
>>>>>>>
>>>>>>> What else should I do?
>>>>>>>
>>>>>>> Thanks Jeff
>>>>>>>
>>>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in
>>>>>>> message
>>>>>>>
>>>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> > This is a win2k3 server correct? is it a domain
>>>>>>> > controller? What error
>>>>>>> > message are they receiving when they try to connect?
>>>>>>> > What do the event
>>>>>>> > logs show when they connect?
>>>>>>>
>>>>>>> > Jeff Pitsch
>>>>>>> > Microsoft MVP - Terminal Server
>>>>>>> > Citrix Technology Professional
>>>>>>> > Provision Networks VIP
>>>>>>>
>>>>>>> > Forums not enough?
>>>>>>> > Get support from the experts at your business
>>>>>>> >http://jeffpitschconsulting.com
>>>>>>>
>>>>>>> > Rene B wrote:
>>>>>>> >> Hello everybody,
>>>>>>>
>>>>>>> >> I have problem accessing TS with RDC as any other user
>>>>>>> >> diferent than administrator even if the user is part of
>>>>>>> >> the administrators group.- Hide quoted text -
>>>>>>>
>>>>>>> - Show quoted text -
 
R

Rene B

Yes, I got the TS working thanks to everyone.

I access your website, it is full of good information

Thank you Vera

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9979E31DBB6E1veranoesthemutforsse@207.46.248.16...
>I see in a newer post from you that you have solved the
> accessibility problem now, is that correct? So we can stop posting
> to this thread?
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 26
> jul 2007 in microsoft.public.windows.terminal_services:
>
>> I got about the License Logging service, thanks.
>>
>> Yes I check the termianls server licensing and every thing is ok
>> (active and running) I have user 5 cals installed already.
>>
>>
>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
>> in message
>> news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16...
>>> That's the service which keeps track of the Windows CALs (not
>>> the Terminal Server CALs). It's notorious for its false alarms,
>>> and should be stopped and disabled on all 2003 servers. You
>>> need to have enough server CALs, of course.
>>>
>>> Documented here:
>>>
>>> 824196 - Description of the License Logging Service in Windows
>>> Server Operating Systems
>>> http://support.microsoft.com/?kbid=824196
>>>
>>> But this should be the default, at least on 2003 SP1 and later.
>>> Which SP are you running on these servers?
>>>
>>> _________________________________________________________
>>> Vera Noest
>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>> TS troubleshooting: http://ts.veranoest.net
>>> ___ please respond in newsgroup, NOT by private email ___
>>>
>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on
>>> 25 jul 2007 in microsoft.public.windows.terminal_services:
>>>
>>>> IT is Windows XP sp2.
>>>>
>>>> I found a problem, when I tried to check the Linceses on the
>>>> server (Administrative Tools/Licensing) I got an error:
>>>>
>>>> "The License Logging Service is not running on
>>>> \\servidor.domain01.local, or \\servidor.domain01.local is not
>>>> accessible."
>>>>
>>>> The same error I got in both servers.
>>>>
>>>> Thanks
>>>>
>>>> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in
>>>> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl...
>>>>> Rene,
>>>>> you have:
>>>>> "User1: member of Domain Users, Remote Desktop User,
>>>>> Administrators" "User2: member of Domain Users, Remote
>>>>> Desktop User"
>>>>>
>>>>> do you mean you added User1 and User1 to Server2 as Remote
>>>>> Desktop users, and User1 to Server2 as Administrators? If its
>>>>> true, you're doing the right thing, you should be able to ts
>>>>> to Server2 with User1 and User2.
>>>>>
>>>>> What are your client machines OS and hardware?
>>>>>
>>>>>
>>>>> Thanks
>>>>> Soo Kuan
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> This posting is provided "AS IS" with no warranties, and
>>>>> confers no rights.
>>>>>
>>>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote
>>>>> in message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl...
>>>>>> Still having the problem,
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> <roberto.reynoso@gmail.com> wrote in message
>>>>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com...
>>>>>>> Please let me know if you still need help with? I might be
>>>>>>> able to help based on the email below.
>>>>>>>
>>>>>>> I will check my email first thing tomorrow morning 07/24/02
>>>>>>>
>>>>>>> Roberto
>>>>>>>
>>>>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto-
>>>>>>> no...@beckerstaxservice.com> wrote:
>>>>>>>> Sorry that I post it again, but my boss is pushing for a
>>>>>>>> solution to it, can
>>>>>>>> sombeody help me !
>>>>>>>>
>>>>>>>> This is my configuration:
>>>>>>>>
>>>>>>>> MDC Server1 (TS License Server) (W2k3)
>>>>>>>> member server Server2 TS Application mode (W2k3) no DC
>>>>>>>> Licensing: Per User (5 cals installed)
>>>>>>>> Local Policy: Allow log on through Terminal Services =
>>>>>>>> Administrators, Remote Desktop Users
>>>>>>>>
>>>>>>>> User1: member of Domain Users, Remote Desktop User,
>>>>>>>> Administrators User2: member of Domain Users, Remote
>>>>>>>> Desktop User
>>>>>>>>
>>>>>>>> non of the users can access TS remotely, users can login
>>>>>>>> locally on TS
>>>>>>>>
>>>>>>>> error: "To log on this remote computer, you must be
>>>>>>>> granted the Allow Log on
>>>>>>>> through Terminal Services rigtht. By default , members of
>>>>>>>> the Remote Desktop
>>>>>>>> Users group have ....."
>>>>>>>>
>>>>>>>> Event Log after try to connect to TS:
>>>>>>>> just secuity shows events
>>>>>>>> Security:
>>>>>>>> --- LOG 1: ---
>>>>>>>> Event Type: Success Audit
>>>>>>>> Event Source: Security
>>>>>>>> Event Category: Logon/Logoff
>>>>>>>> Event ID: 576
>>>>>>>> Date: 7/24/2007
>>>>>>>> Time: 10:43:06 AM
>>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>>> Computer: TPISAPPSVR01
>>>>>>>> Description:
>>>>>>>> Special privileges assigned to new logon:
>>>>>>>> User Name: TPISAPPSVR01$
>>>>>>>> Domain: TPIS
>>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>>> Privileges: SeSecurityPrivilege
>>>>>>>> SeBackupPrivilege
>>>>>>>> SeRestorePrivilege
>>>>>>>> SeTakeOwnershipPrivilege
>>>>>>>> SeDebugPrivilege
>>>>>>>> SeSystemEnvironmentPrivilege
>>>>>>>> SeLoadDriverPrivilege
>>>>>>>> SeImpersonatePrivilege
>>>>>>>>
>>>>>>>> --- LOG 2 --
>>>>>>>> Event Type: Success Audit
>>>>>>>> Event Source: Security
>>>>>>>> Event Category: Logon/Logoff
>>>>>>>> Event ID: 540
>>>>>>>> Date: 7/24/2007
>>>>>>>> Time: 10:43:06 AM
>>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>>> Computer: TPISAPPSVR01
>>>>>>>> Description:
>>>>>>>> Successful Network Logon:
>>>>>>>> User Name: TPISAPPSVR01$
>>>>>>>> Domain: TPIS
>>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>>> Logon Type: 3
>>>>>>>> Logon Process: Kerberos
>>>>>>>> Authentication Package: Kerberos
>>>>>>>> Workstation Name:
>>>>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d}
>>>>>>>> Caller User Name: -
>>>>>>>> Caller Domain: -
>>>>>>>> Caller Logon ID: -
>>>>>>>> Caller Process ID: -
>>>>>>>> Transited Services: -
>>>>>>>> Source Network Address: -
>>>>>>>> Source Port: -
>>>>>>>>
>>>>>>>> -- LOG 3 --
>>>>>>>> Event Type: Success Audit
>>>>>>>> Event Source: Security
>>>>>>>> Event Category: Logon/Logoff
>>>>>>>> Event ID: 538
>>>>>>>> Date: 7/24/2007
>>>>>>>> Time: 10:43:06 AM
>>>>>>>> User: NT AUTHORITY\SYSTEM
>>>>>>>> Computer: TPISAPPSVR01
>>>>>>>> Description:
>>>>>>>> User Logoff:
>>>>>>>> User Name: TPISAPPSVR01$
>>>>>>>> Domain: TPIS
>>>>>>>> Logon ID: (0x0,0x98CDE)
>>>>>>>> Logon Type: 3
>>>>>>>>
>>>>>>>> What else should I do?
>>>>>>>>
>>>>>>>> Thanks Jeff
>>>>>>>>
>>>>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in
>>>>>>>> message
>>>>>>>>
>>>>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl...
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> > This is a win2k3 server correct? is it a domain
>>>>>>>> > controller? What error
>>>>>>>> > message are they receiving when they try to connect?
>>>>>>>> > What do the event
>>>>>>>> > logs show when they connect?
>>>>>>>>
>>>>>>>> > Jeff Pitsch
>>>>>>>> > Microsoft MVP - Terminal Server
>>>>>>>> > Citrix Technology Professional
>>>>>>>> > Provision Networks VIP
>>>>>>>>
>>>>>>>> > Forums not enough?
>>>>>>>> > Get support from the experts at your business
>>>>>>>> >http://jeffpitschconsulting.com
>>>>>>>>
>>>>>>>> > Rene B wrote:
>>>>>>>> >> Hello everybody,
>>>>>>>>
>>>>>>>> >> I have problem accessing TS with RDC as any other user
>>>>>>>> >> diferent than administrator even if the user is part of
>>>>>>>> >> the administrators group.- Hide quoted text -
>>>>>>>>
>>>>>>>> - Show quoted text -
 
You must log in or register to reply here.

Similar threads

F
SYSTEM INTEGRITY AUDIT FAILURE Account Name: LOCAL SERVICE Account Domain: NT AUTHORITY
Replies
0
Views
16
Fire Ant1
F
P
What is the difference of the successful run of the same app but one works other does not work - File share Event viewer
Replies
0
Views
61
PZac-CAN
P
K
How do i fix this
Replies
0
Views
31
Kyle Mars
K
C
Help with kernel power issue error code 68
Replies
0
Views
34
conner mccann
C
L
Hi, today my system rebut with blue screen can someone assist me ? I liked the minidump file
Replies
0
Views
52
LorenzoCamassa
L
Back
Top Bottom