Only Administrators User can access to Remote Desktop

[Guest Juan Carlos Flores]

I have a problem, when i want to configure a user to access to RD, by giving

them into the group "Remote Desktop Users", the users can not access,

receiving a message indicating that they no have the correct permision and

meybe if i put them into the group of "Remote Desktop Users" they can have

access to RD.

 

If i put the users into Administrators Users Group then all of them have the

rigth access.

 

I will appreciate any help you can give me.

 

 

Juan Carlos Flores

Choluteca Honduras.

[Guest Vera Noest [MVP]]

Re: Only Administrators User can access to Remote Desktop

 

Is your server running Remote Desktop for Administration or full-

blown Terminal Services?

Is the server a member server in a domain, or a Domain Controller?

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul 2007

in microsoft.public.windows.terminal_services:

> I have a problem, when i want to configure a user to access to

> RD, by giving them into the group "Remote Desktop Users", the

> users can not access, receiving a message indicating that they

> no have the correct permision and meybe if i put them into the

> group of "Remote Desktop Users" they can have access to RD.

>

> If i put the users into Administrators Users Group then all of

> them have the rigth access.

>

> I will appreciate any help you can give me.

>

>

> Juan Carlos Flores

> Choluteca Honduras.

[Guest Juan Carlos Flores]

Re: Only Administrators User can access to Remote Desktop

 

> Is your server running Remote Desktop for Administration or full-

> blown Terminal Services?

Both... i have some clients running application over TS and i need to

access for administration.

 

 

> Is the server a member server in a domain, or a Domain Controller?

It is a Domain Controller

 

 

 

 

 

 

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> escribió en el

mensaje news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...

> Is your server running Remote Desktop for Administration or full-

> blown Terminal Services?

> Is the server a member server in a domain, or a Domain Controller?

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul 2007

> in microsoft.public.windows.terminal_services:

>

>> I have a problem, when i want to configure a user to access to

>> RD, by giving them into the group "Remote Desktop Users", the

>> users can not access, receiving a message indicating that they

>> no have the correct permision and meybe if i put them into the

>> group of "Remote Desktop Users" they can have access to RD.

>>

>> If i put the users into Administrators Users Group then all of

>> them have the rigth access.

>>

>> I will appreciate any help you can give me.

>>

>>

>> Juan Carlos Flores

>> Choluteca Honduras.

[Guest Vera Noest [MVP]]

Re: Only Administrators User can access to Remote Desktop

 

OK, I assume that you know that running TS on a Domain Controller

is *not* recommended, for both performance and security reasons. By

installing TS, you configured your Domain Controller as a multi-

user workstation. That's a risky situation on a critical server.

 

That said, you'll have to make your users members of the Domain

Local built-in group Remote Desktop Users in AD.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul 2007

in microsoft.public.windows.terminal_services:

>> Is your server running Remote Desktop for Administration or

>> full- blown Terminal Services?

>

> Both... i have some clients running application over TS and i

> need to access for administration.

>

>> Is the server a member server in a domain, or a Domain

>> Controller?

>

> It is a Domain Controller

>

> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>

> escribió en el mensaje

> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...

>> Is your server running Remote Desktop for Administration or

>> full- blown Terminal Services?

>> Is the server a member server in a domain, or a Domain

>> Controller?

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul

>> 2007 in microsoft.public.windows.terminal_services:

>>

>>> I have a problem, when i want to configure a user to access to

>>> RD, by giving them into the group "Remote Desktop Users", the

>>> users can not access, receiving a message indicating that they

>>> no have the correct permision and meybe if i put them into the

>>> group of "Remote Desktop Users" they can have access to RD.

>>>

>>> If i put the users into Administrators Users Group then all of

>>> them have the rigth access.

>>>

>>> I will appreciate any help you can give me.

>>>

>>>

>>> Juan Carlos Flores

>>> Choluteca Honduras.

[Guest Juan Carlos Flores]

Re: Only Administrators User can access to Remote Desktop

 

I've tried a lot with that with no results.

 

Really the same server as DC and Data server and application server is not a

risk situation for me cause is just a few users that has the necesity to do

this, but i need that these user can access to the TS only as member of RD

Users Group, but that is imposible for me at this moment i don't know why.

Only the Administrators member can access by TS.

 

 

Regards

 

Juan Carlos Flores

Choluteca, Honduras

 

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> escribió en el

mensaje news:Xns9969EB6C3F466veranoesthemutforsse@207.46.248.16...

> OK, I assume that you know that running TS on a Domain Controller

> is *not* recommended, for both performance and security reasons. By

> installing TS, you configured your Domain Controller as a multi-

> user workstation. That's a risky situation on a critical server.

>

> That said, you'll have to make your users members of the Domain

> Local built-in group Remote Desktop Users in AD.

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul 2007

> in microsoft.public.windows.terminal_services:

>

>>> Is your server running Remote Desktop for Administration or

>>> full- blown Terminal Services?

>>

>> Both... i have some clients running application over TS and i

>> need to access for administration.

>>

>>> Is the server a member server in a domain, or a Domain

>>> Controller?

>>

>> It is a Domain Controller

>>

>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>

>> escribió en el mensaje

>> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...

>>> Is your server running Remote Desktop for Administration or

>>> full- blown Terminal Services?

>>> Is the server a member server in a domain, or a Domain

>>> Controller?

>>>

>>> _________________________________________________________

>>> Vera Noest

>>> MCSE, CCEA, Microsoft MVP - Terminal Server

>>> TS troubleshooting: http://ts.veranoest.net

>>> ___ please respond in newsgroup, NOT by private email ___

>>>

>>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul

>>> 2007 in microsoft.public.windows.terminal_services:

>>>

>>>> I have a problem, when i want to configure a user to access to

>>>> RD, by giving them into the group "Remote Desktop Users", the

>>>> users can not access, receiving a message indicating that they

>>>> no have the correct permision and meybe if i put them into the

>>>> group of "Remote Desktop Users" they can have access to RD.

>>>>

>>>> If i put the users into Administrators Users Group then all of

>>>> them have the rigth access.

>>>>

>>>> I will appreciate any help you can give me.

>>>>

>>>>

>>>> Juan Carlos Flores

>>>> Choluteca Honduras.

[Guest Vera Noest [MVP]]

Re: Only Administrators User can access to Remote Desktop

 

Check this setting in the Default Domain Controller Policy:

Computer Configuration - Windows Settings - Security Settings - Local

Policies - User rights Assignment

"Allow log on through Terminal Services"

 

Make sure that the BUILTIN\Remote Desktop Users group is a member of

the list

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 11 jul 2007

in microsoft.public.windows.terminal_services:

> I've tried a lot with that with no results.

>

> Really the same server as DC and Data server and application

> server is not a risk situation for me cause is just a few users

> that has the necesity to do this, but i need that these user can

> access to the TS only as member of RD Users Group, but that is

> imposible for me at this moment i don't know why. Only the

> Administrators member can access by TS.

>

>

> Regards

>

> Juan Carlos Flores

> Choluteca, Honduras

>

>

> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>

> escribió en el mensaje

> news:Xns9969EB6C3F466veranoesthemutforsse@207.46.248.16...

>> OK, I assume that you know that running TS on a Domain

>> Controller is *not* recommended, for both performance and

>> security reasons. By installing TS, you configured your Domain

>> Controller as a multi- user workstation. That's a risky

>> situation on a critical server.

>>

>> That said, you'll have to make your users members of the Domain

>> Local built-in group Remote Desktop Users in AD.

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 10 jul

>> 2007 in microsoft.public.windows.terminal_services:

>>

>>>> Is your server running Remote Desktop for Administration or

>>>> full- blown Terminal Services?

>>>

>>> Both... i have some clients running application over TS and i

>>> need to access for administration.

>>>

>>>> Is the server a member server in a domain, or a Domain

>>>> Controller?

>>>

>>> It is a Domain Controller

>>>

>>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se>

>>> escribió en el mensaje

>>> news:Xns9969206496AFveranoesthemutforsse@207.46.248.16...

>>>> Is your server running Remote Desktop for Administration or

>>>> full- blown Terminal Services?

>>>> Is the server a member server in a domain, or a Domain

>>>> Controller?

>>>>

>>>> _________________________________________________________

>>>> Vera Noest

>>>> MCSE, CCEA, Microsoft MVP - Terminal Server

>>>> TS troubleshooting: http://ts.veranoest.net

>>>> ___ please respond in newsgroup, NOT by private email ___

>>>>

>>>> "Juan Carlos Flores" <juanka_hn@hotmail.com> wrote on 09 jul

>>>> 2007 in microsoft.public.windows.terminal_services:

>>>>

>>>>> I have a problem, when i want to configure a user to access

>>>>> to RD, by giving them into the group "Remote Desktop Users",

>>>>> the users can not access, receiving a message indicating

>>>>> that they no have the correct permision and meybe if i put

>>>>> them into the group of "Remote Desktop Users" they can have

>>>>> access to RD.

>>>>>

>>>>> If i put the users into Administrators Users Group then all

>>>>> of them have the rigth access.

>>>>>

>>>>> I will appreciate any help you can give me.

>>>>>

>>>>>

>>>>> Juan Carlos Flores

>>>>> Choluteca Honduras.