TS/Remote Desktop Users

[sihfmis]

I am confused. As I usnderstand, I have to assign any new users to the
"Remote Desktop" group for access purposes. I did that and I am still
getting a prompt that the new user has to be assigned to the group. What
else am I missing?

 

[Jeff]

you added them to the Local Remote desktop users group in the local policy on
the actual terminal server and they still can't connect? Do they have
permissions in their AD profile? When you right-click on My Computer and go
into Properties and into the Remote tab is the "Allow users to connect
remotely..." checked? Does the Local Remote Desktop users group exist there?


"sihfmis" wrote:

> I am confused. As I usnderstand, I have to assign any new users to the
> "Remote Desktop" group for access purposes. I did that and I am still
> getting a prompt that the new user has to be assigned to the group. What
> else am I missing?

 

[Helge Klein]

Please check that the group "Remote Desktop Users" has the security
right "Allow logon through Terminal Services".

I hope this helps.

Helge

On 8 Aug., 20:52, sihfmis <sihf...@discussions.microsoft.com> wrote:
> I am confused. As I usnderstand, I have to assign any new users to the
> "Remote Desktop" group for access purposes. I did that and I am still
> getting a prompt that the new user has to be assigned to the group. What
> else am I missing?

 

[sihfmis]

Okay, I give. Where do I find the security setting at?

"Helge Klein" wrote:

> Please check that the group "Remote Desktop Users" has the security
> right "Allow logon through Terminal Services".
>
> I hope this helps.
>
> Helge
>
> On 8 Aug., 20:52, sihfmis <sihf...@discussions.microsoft.com> wrote:
> > I am confused. As I usnderstand, I have to assign any new users to the
> > "Remote Desktop" group for access purposes. I did that and I am still
> > getting a prompt that the new user has to be assigned to the group. What
> > else am I missing?
>
>
>

 

[sihfmis]

Okay, I found the "allow logon through terminal services" and it is set
(locally, on the TS server) to allow admin & remote desktop users. I can log
in a test user that is setup local on the server but not my domain users.
How do I get the AD user to interact with the TS/Remote session?

"Helge Klein" wrote:

> Please check that the group "Remote Desktop Users" has the security
> right "Allow logon through Terminal Services".
>
> I hope this helps.
>
> Helge
>
> On 8 Aug., 20:52, sihfmis <sihf...@discussions.microsoft.com> wrote:
> > I am confused. As I usnderstand, I have to assign any new users to the
> > "Remote Desktop" group for access purposes. I did that and I am still
> > getting a prompt that the new user has to be assigned to the group. What
> > else am I missing?
>
>
>

 

[Jeff]

Create a security group like "TerminalUsers" to your Active Directory and add
your remote users to that group. Then in your Local Remote Desktop Users
group on the terminal server you add the "TerminalUsers" Domain security
group to the Local Remote desktop users group. Or you can just add Domain
Users to your Local remote desktop users group (not advised). It depends on
how you want to setup your security.

"sihfmis" wrote:

> Okay, I found the "allow logon through terminal services" and it is set
> (locally, on the TS server) to allow admin & remote desktop users. I can log
> in a test user that is setup local on the server but not my domain users.
> How do I get the AD user to interact with the TS/Remote session?
>
> "Helge Klein" wrote:
>
> > Please check that the group "Remote Desktop Users" has the security
> > right "Allow logon through Terminal Services".
> >
> > I hope this helps.
> >
> > Helge
> >
> > On 8 Aug., 20:52, sihfmis <sihf...@discussions.microsoft.com> wrote:
> > > I am confused. As I usnderstand, I have to assign any new users to the
> > > "Remote Desktop" group for access purposes. I did that and I am still
> > > getting a prompt that the new user has to be assigned to the group. What
> > > else am I missing?
> >
> >
> >

 

[sihfmis]

That did it, thanks.

"Jeff" wrote:

> Create a security group like "TerminalUsers" to your Active Directory and add
> your remote users to that group. Then in your Local Remote Desktop Users
> group on the terminal server you add the "TerminalUsers" Domain security
> group to the Local Remote desktop users group. Or you can just add Domain
> Users to your Local remote desktop users group (not advised). It depends on
> how you want to setup your security.
>
> "sihfmis" wrote:
>
> > Okay, I found the "allow logon through terminal services" and it is set
> > (locally, on the TS server) to allow admin & remote desktop users. I can log
> > in a test user that is setup local on the server but not my domain users.
> > How do I get the AD user to interact with the TS/Remote session?
> >
> > "Helge Klein" wrote:
> >
> > > Please check that the group "Remote Desktop Users" has the security
> > > right "Allow logon through Terminal Services".
> > >
> > > I hope this helps.
> > >
> > > Helge
> > >
> > > On 8 Aug., 20:52, sihfmis <sihf...@discussions.microsoft.com> wrote:
> > > > I am confused. As I usnderstand, I have to assign any new users to the
> > > > "Remote Desktop" group for access purposes. I did that and I am still
> > > > getting a prompt that the new user has to be assigned to the group. What
> > > > else am I missing?
> > >
> > >
> > >