Guest Rene B Posted July 24, 2007 Posted July 24, 2007 Sorry that I post it again, but my boss is pushing for a solution to it, can sombeody help me ! This is my configuration: MDC Server1 (TS License Server) (W2k3) member server Server2 TS Application mode (W2k3) no DC Licensing: Per User (5 cals installed) Local Policy: Allow log on through Terminal Services = Administrators, Remote Desktop Users User1: member of Domain Users, Remote Desktop User, Administrators User2: member of Domain Users, Remote Desktop User non of the users can access TS remotely, users can login locally on TS error: "To log on this remote computer, you must be granted the Allow Log on through Terminal Services rigtht. By default , members of the Remote Desktop Users group have ....." Event Log after try to connect to TS: just secuity shows events Security: --- LOG 1: --- Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 576 Date: 7/24/2007 Time: 10:43:06 AM User: NT AUTHORITY\SYSTEM Computer: TPISAPPSVR01 Description: Special privileges assigned to new logon: User Name: TPISAPPSVR01$ Domain: TPIS Logon ID: (0x0,0x98CDE) Privileges: SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeLoadDriverPrivilege SeImpersonatePrivilege --- LOG 2 -- Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 540 Date: 7/24/2007 Time: 10:43:06 AM User: NT AUTHORITY\SYSTEM Computer: TPISAPPSVR01 Description: Successful Network Logon: User Name: TPISAPPSVR01$ Domain: TPIS Logon ID: (0x0,0x98CDE) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: - Source Port: - -- LOG 3 -- Event Type: Success Audit Event Source: Security Event Category: Logon/Logoff Event ID: 538 Date: 7/24/2007 Time: 10:43:06 AM User: NT AUTHORITY\SYSTEM Computer: TPISAPPSVR01 Description: User Logoff: User Name: TPISAPPSVR01$ Domain: TPIS Logon ID: (0x0,0x98CDE) Logon Type: 3 What else should I do? Thanks Jeff "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... > This is a win2k3 server correct? is it a domain controller? What error > message are they receiving when they try to connect? What do the event > logs show when they connect? > > Jeff Pitsch > Microsoft MVP - Terminal Server > Citrix Technology Professional > Provision Networks VIP > > Forums not enough? > Get support from the experts at your business > http://jeffpitschconsulting.com > > Rene B wrote: >> Hello everybody, >> >> I have problem accessing TS with RDC as any other user diferent than >> administrator even if the user is part of the administrators group. >> >>
Guest Vera Noest [MVP] Posted July 24, 2007 Posted July 24, 2007 Re: users can not access TS PLEASE HELP Has this ever worked before? If yes, when did it stop working? What was changed on the server or in the domain immediately prior to this problem? And have you checked if there are other Group Policies in the domain which override your local policy? Use resultant Set of Policies to see all GPOs which affect your users. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 24 jul 2007 in microsoft.public.windows.terminal_services: > Sorry that I post it again, but my boss is pushing for a > solution to it, can sombeody help me ! > > This is my configuration: > > MDC Server1 (TS License Server) (W2k3) > member server Server2 TS Application mode (W2k3) no DC > Licensing: Per User (5 cals installed) > Local Policy: Allow log on through Terminal Services = > Administrators, Remote Desktop Users > > User1: member of Domain Users, Remote Desktop User, > Administrators User2: member of Domain Users, Remote Desktop > User > > non of the users can access TS remotely, users can login locally > on TS > > error: "To log on this remote computer, you must be granted the > Allow Log on through Terminal Services rigtht. By default , > members of the Remote Desktop Users group have ....." > > Event Log after try to connect to TS: > just secuity shows events > Security: > --- LOG 1: --- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 576 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > Special privileges assigned to new logon: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Privileges: SeSecurityPrivilege > SeBackupPrivilege > SeRestorePrivilege > SeTakeOwnershipPrivilege > SeDebugPrivilege > SeSystemEnvironmentPrivilege > SeLoadDriverPrivilege > SeImpersonatePrivilege > > --- LOG 2 -- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 540 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > Successful Network Logon: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Logon Type: 3 > Logon Process: Kerberos > Authentication Package: Kerberos > Workstation Name: > Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} > Caller User Name: - > Caller Domain: - > Caller Logon ID: - > Caller Process ID: - > Transited Services: - > Source Network Address: - > Source Port: - > > -- LOG 3 -- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 538 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > User Logoff: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Logon Type: 3 > > > > What else should I do? > > > Thanks Jeff > > > "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message > news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >> This is a win2k3 server correct? is it a domain controller? >> What error message are they receiving when they try to connect? >> What do the event logs show when they connect? >> >> Jeff Pitsch >> Microsoft MVP - Terminal Server >> Citrix Technology Professional >> Provision Networks VIP >> >> Forums not enough? >> Get support from the experts at your business >> http://jeffpitschconsulting.com >> >> Rene B wrote: >>> Hello everybody, >>> >>> I have problem accessing TS with RDC as any other user >>> diferent than administrator even if the user is part of the >>> administrators group.
Guest roberto.reynoso@gmail.com Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP Please let me know if you still need help with? I might be able to help based on the email below. I will check my email first thing tomorrow morning 07/24/02 Roberto On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- no...@beckerstaxservice.com> wrote: > Sorry that I post it again, but my boss is pushing for a solution to it, can > sombeody help me ! > > This is my configuration: > > MDC Server1 (TS License Server) (W2k3) > member server Server2 TS Application mode (W2k3) no DC > Licensing: Per User (5 cals installed) > Local Policy: Allow log on through Terminal Services = Administrators, > Remote Desktop Users > > User1: member of Domain Users, Remote Desktop User, Administrators > User2: member of Domain Users, Remote Desktop User > > non of the users can access TS remotely, users can login locally on TS > > error: "To log on this remote computer, you must be granted the Allow Log on > through Terminal Services rigtht. By default , members of the Remote Desktop > Users group have ....." > > Event Log after try to connect to TS: > just secuity shows events > Security: > --- LOG 1: --- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 576 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > Special privileges assigned to new logon: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Privileges: SeSecurityPrivilege > SeBackupPrivilege > SeRestorePrivilege > SeTakeOwnershipPrivilege > SeDebugPrivilege > SeSystemEnvironmentPrivilege > SeLoadDriverPrivilege > SeImpersonatePrivilege > > --- LOG 2 -- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 540 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > Successful Network Logon: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Logon Type: 3 > Logon Process: Kerberos > Authentication Package: Kerberos > Workstation Name: > Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} > Caller User Name: - > Caller Domain: - > Caller Logon ID: - > Caller Process ID: - > Transited Services: - > Source Network Address: - > Source Port: - > > -- LOG 3 -- > Event Type: Success Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 538 > Date: 7/24/2007 > Time: 10:43:06 AM > User: NT AUTHORITY\SYSTEM > Computer: TPISAPPSVR01 > Description: > User Logoff: > User Name: TPISAPPSVR01$ > Domain: TPIS > Logon ID: (0x0,0x98CDE) > Logon Type: 3 > > What else should I do? > > Thanks Jeff > > "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message > > news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... > > > > > This is a win2k3 server correct? is it a domain controller? What error > > message are they receiving when they try to connect? What do the event > > logs show when they connect? > > > Jeff Pitsch > > Microsoft MVP - Terminal Server > > Citrix Technology Professional > > Provision Networks VIP > > > Forums not enough? > > Get support from the experts at your business > >http://jeffpitschconsulting.com > > > Rene B wrote: > >> Hello everybody, > > >> I have problem accessing TS with RDC as any other user diferent than > >> administrator even if the user is part of the administrators group.- Hide quoted text - > > - Show quoted text -
Guest Rene B Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP these are new server, they never worked before. I dindn't make any changes on the policies, I'm using the default domain policy. Thanks "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message news:Xns9977EE070245Dveranoesthemutforsse@207.46.248.16... > Has this ever worked before? > If yes, when did it stop working? What was changed on the server or > in the domain immediately prior to this problem? > And have you checked if there are other Group Policies in the > domain which override your local policy? > Use resultant Set of Policies to see all GPOs which affect your > users. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 24 > jul 2007 in microsoft.public.windows.terminal_services: > >> Sorry that I post it again, but my boss is pushing for a >> solution to it, can sombeody help me ! >> >> This is my configuration: >> >> MDC Server1 (TS License Server) (W2k3) >> member server Server2 TS Application mode (W2k3) no DC >> Licensing: Per User (5 cals installed) >> Local Policy: Allow log on through Terminal Services = >> Administrators, Remote Desktop Users >> >> User1: member of Domain Users, Remote Desktop User, >> Administrators User2: member of Domain Users, Remote Desktop >> User >> >> non of the users can access TS remotely, users can login locally >> on TS >> >> error: "To log on this remote computer, you must be granted the >> Allow Log on through Terminal Services rigtht. By default , >> members of the Remote Desktop Users group have ....." >> >> Event Log after try to connect to TS: >> just secuity shows events >> Security: >> --- LOG 1: --- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 576 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> Special privileges assigned to new logon: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Privileges: SeSecurityPrivilege >> SeBackupPrivilege >> SeRestorePrivilege >> SeTakeOwnershipPrivilege >> SeDebugPrivilege >> SeSystemEnvironmentPrivilege >> SeLoadDriverPrivilege >> SeImpersonatePrivilege >> >> --- LOG 2 -- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 540 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> Successful Network Logon: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Logon Type: 3 >> Logon Process: Kerberos >> Authentication Package: Kerberos >> Workstation Name: >> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >> Caller User Name: - >> Caller Domain: - >> Caller Logon ID: - >> Caller Process ID: - >> Transited Services: - >> Source Network Address: - >> Source Port: - >> >> -- LOG 3 -- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 538 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> User Logoff: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Logon Type: 3 >> >> >> >> What else should I do? >> >> >> Thanks Jeff >> >> >> "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message >> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>> This is a win2k3 server correct? is it a domain controller? >>> What error message are they receiving when they try to connect? >>> What do the event logs show when they connect? >>> >>> Jeff Pitsch >>> Microsoft MVP - Terminal Server >>> Citrix Technology Professional >>> Provision Networks VIP >>> >>> Forums not enough? >>> Get support from the experts at your business >>> http://jeffpitschconsulting.com >>> >>> Rene B wrote: >>>> Hello everybody, >>>> >>>> I have problem accessing TS with RDC as any other user >>>> diferent than administrator even if the user is part of the >>>> administrators group.
Guest Rene B Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP Still having the problem, Thanks <roberto.reynoso@gmail.com> wrote in message news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... > Please let me know if you still need help with? I might be able to > help based on the email below. > > I will check my email first thing tomorrow morning 07/24/02 > > Roberto > > On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- > no...@beckerstaxservice.com> wrote: >> Sorry that I post it again, but my boss is pushing for a solution to it, >> can >> sombeody help me ! >> >> This is my configuration: >> >> MDC Server1 (TS License Server) (W2k3) >> member server Server2 TS Application mode (W2k3) no DC >> Licensing: Per User (5 cals installed) >> Local Policy: Allow log on through Terminal Services = Administrators, >> Remote Desktop Users >> >> User1: member of Domain Users, Remote Desktop User, Administrators >> User2: member of Domain Users, Remote Desktop User >> >> non of the users can access TS remotely, users can login locally on TS >> >> error: "To log on this remote computer, you must be granted the Allow Log >> on >> through Terminal Services rigtht. By default , members of the Remote >> Desktop >> Users group have ....." >> >> Event Log after try to connect to TS: >> just secuity shows events >> Security: >> --- LOG 1: --- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 576 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> Special privileges assigned to new logon: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Privileges: SeSecurityPrivilege >> SeBackupPrivilege >> SeRestorePrivilege >> SeTakeOwnershipPrivilege >> SeDebugPrivilege >> SeSystemEnvironmentPrivilege >> SeLoadDriverPrivilege >> SeImpersonatePrivilege >> >> --- LOG 2 -- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 540 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> Successful Network Logon: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Logon Type: 3 >> Logon Process: Kerberos >> Authentication Package: Kerberos >> Workstation Name: >> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >> Caller User Name: - >> Caller Domain: - >> Caller Logon ID: - >> Caller Process ID: - >> Transited Services: - >> Source Network Address: - >> Source Port: - >> >> -- LOG 3 -- >> Event Type: Success Audit >> Event Source: Security >> Event Category: Logon/Logoff >> Event ID: 538 >> Date: 7/24/2007 >> Time: 10:43:06 AM >> User: NT AUTHORITY\SYSTEM >> Computer: TPISAPPSVR01 >> Description: >> User Logoff: >> User Name: TPISAPPSVR01$ >> Domain: TPIS >> Logon ID: (0x0,0x98CDE) >> Logon Type: 3 >> >> What else should I do? >> >> Thanks Jeff >> >> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message >> >> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >> >> >> >> > This is a win2k3 server correct? is it a domain controller? What >> > error >> > message are they receiving when they try to connect? What do the event >> > logs show when they connect? >> >> > Jeff Pitsch >> > Microsoft MVP - Terminal Server >> > Citrix Technology Professional >> > Provision Networks VIP >> >> > Forums not enough? >> > Get support from the experts at your business >> >http://jeffpitschconsulting.com >> >> > Rene B wrote: >> >> Hello everybody, >> >> >> I have problem accessing TS with RDC as any other user diferent than >> >> administrator even if the user is part of the administrators group.- >> >> Hide quoted text - >> >> - Show quoted text - > >
Guest Soo Kuan Teo [MSFT] Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP Rene, you have: "User1: member of Domain Users, Remote Desktop User, Administrators" "User2: member of Domain Users, Remote Desktop User" do you mean you added User1 and User1 to Server2 as Remote Desktop users, and User1 to Server2 as Administrators? If its true, you're doing the right thing, you should be able to ts to Server2 with User1 and User2. What are your client machines OS and hardware? Thanks Soo Kuan -- This posting is provided "AS IS" with no warranties, and confers no rights. "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... > Still having the problem, > > Thanks > > <roberto.reynoso@gmail.com> wrote in message > news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >> Please let me know if you still need help with? I might be able to >> help based on the email below. >> >> I will check my email first thing tomorrow morning 07/24/02 >> >> Roberto >> >> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >> no...@beckerstaxservice.com> wrote: >>> Sorry that I post it again, but my boss is pushing for a solution to it, >>> can >>> sombeody help me ! >>> >>> This is my configuration: >>> >>> MDC Server1 (TS License Server) (W2k3) >>> member server Server2 TS Application mode (W2k3) no DC >>> Licensing: Per User (5 cals installed) >>> Local Policy: Allow log on through Terminal Services = Administrators, >>> Remote Desktop Users >>> >>> User1: member of Domain Users, Remote Desktop User, Administrators >>> User2: member of Domain Users, Remote Desktop User >>> >>> non of the users can access TS remotely, users can login locally on TS >>> >>> error: "To log on this remote computer, you must be granted the Allow >>> Log on >>> through Terminal Services rigtht. By default , members of the Remote >>> Desktop >>> Users group have ....." >>> >>> Event Log after try to connect to TS: >>> just secuity shows events >>> Security: >>> --- LOG 1: --- >>> Event Type: Success Audit >>> Event Source: Security >>> Event Category: Logon/Logoff >>> Event ID: 576 >>> Date: 7/24/2007 >>> Time: 10:43:06 AM >>> User: NT AUTHORITY\SYSTEM >>> Computer: TPISAPPSVR01 >>> Description: >>> Special privileges assigned to new logon: >>> User Name: TPISAPPSVR01$ >>> Domain: TPIS >>> Logon ID: (0x0,0x98CDE) >>> Privileges: SeSecurityPrivilege >>> SeBackupPrivilege >>> SeRestorePrivilege >>> SeTakeOwnershipPrivilege >>> SeDebugPrivilege >>> SeSystemEnvironmentPrivilege >>> SeLoadDriverPrivilege >>> SeImpersonatePrivilege >>> >>> --- LOG 2 -- >>> Event Type: Success Audit >>> Event Source: Security >>> Event Category: Logon/Logoff >>> Event ID: 540 >>> Date: 7/24/2007 >>> Time: 10:43:06 AM >>> User: NT AUTHORITY\SYSTEM >>> Computer: TPISAPPSVR01 >>> Description: >>> Successful Network Logon: >>> User Name: TPISAPPSVR01$ >>> Domain: TPIS >>> Logon ID: (0x0,0x98CDE) >>> Logon Type: 3 >>> Logon Process: Kerberos >>> Authentication Package: Kerberos >>> Workstation Name: >>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>> Caller User Name: - >>> Caller Domain: - >>> Caller Logon ID: - >>> Caller Process ID: - >>> Transited Services: - >>> Source Network Address: - >>> Source Port: - >>> >>> -- LOG 3 -- >>> Event Type: Success Audit >>> Event Source: Security >>> Event Category: Logon/Logoff >>> Event ID: 538 >>> Date: 7/24/2007 >>> Time: 10:43:06 AM >>> User: NT AUTHORITY\SYSTEM >>> Computer: TPISAPPSVR01 >>> Description: >>> User Logoff: >>> User Name: TPISAPPSVR01$ >>> Domain: TPIS >>> Logon ID: (0x0,0x98CDE) >>> Logon Type: 3 >>> >>> What else should I do? >>> >>> Thanks Jeff >>> >>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message >>> >>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>> >>> >>> >>> > This is a win2k3 server correct? is it a domain controller? What >>> > error >>> > message are they receiving when they try to connect? What do the >>> > event >>> > logs show when they connect? >>> >>> > Jeff Pitsch >>> > Microsoft MVP - Terminal Server >>> > Citrix Technology Professional >>> > Provision Networks VIP >>> >>> > Forums not enough? >>> > Get support from the experts at your business >>> >http://jeffpitschconsulting.com >>> >>> > Rene B wrote: >>> >> Hello everybody, >>> >>> >> I have problem accessing TS with RDC as any other user diferent than >>> >> administrator even if the user is part of the administrators group.- >>> >> Hide quoted text - >>> >>> - Show quoted text - >> >> > >
Guest Rene B Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP IT is Windows XP sp2. I found a problem, when I tried to check the Linceses on the server (Administrative Tools/Licensing) I got an error: "The License Logging Service is not running on \\servidor.domain01.local, or \\servidor.domain01.local is not accessible." The same error I got in both servers. Thanks "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl... > Rene, > you have: > "User1: member of Domain Users, Remote Desktop User, Administrators" > "User2: member of Domain Users, Remote Desktop User" > > do you mean you added User1 and User1 to Server2 as Remote Desktop users, > and User1 to Server2 as Administrators? If its true, you're doing the > right thing, you should be able to ts to Server2 with User1 and User2. > > What are your client machines OS and hardware? > > > Thanks > Soo Kuan > > > > > > -- > This posting is provided "AS IS" with no warranties, and confers no > rights. > > "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in message > news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... >> Still having the problem, >> >> Thanks >> >> <roberto.reynoso@gmail.com> wrote in message >> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >>> Please let me know if you still need help with? I might be able to >>> help based on the email below. >>> >>> I will check my email first thing tomorrow morning 07/24/02 >>> >>> Roberto >>> >>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >>> no...@beckerstaxservice.com> wrote: >>>> Sorry that I post it again, but my boss is pushing for a solution to >>>> it, can >>>> sombeody help me ! >>>> >>>> This is my configuration: >>>> >>>> MDC Server1 (TS License Server) (W2k3) >>>> member server Server2 TS Application mode (W2k3) no DC >>>> Licensing: Per User (5 cals installed) >>>> Local Policy: Allow log on through Terminal Services = Administrators, >>>> Remote Desktop Users >>>> >>>> User1: member of Domain Users, Remote Desktop User, Administrators >>>> User2: member of Domain Users, Remote Desktop User >>>> >>>> non of the users can access TS remotely, users can login locally on TS >>>> >>>> error: "To log on this remote computer, you must be granted the Allow >>>> Log on >>>> through Terminal Services rigtht. By default , members of the Remote >>>> Desktop >>>> Users group have ....." >>>> >>>> Event Log after try to connect to TS: >>>> just secuity shows events >>>> Security: >>>> --- LOG 1: --- >>>> Event Type: Success Audit >>>> Event Source: Security >>>> Event Category: Logon/Logoff >>>> Event ID: 576 >>>> Date: 7/24/2007 >>>> Time: 10:43:06 AM >>>> User: NT AUTHORITY\SYSTEM >>>> Computer: TPISAPPSVR01 >>>> Description: >>>> Special privileges assigned to new logon: >>>> User Name: TPISAPPSVR01$ >>>> Domain: TPIS >>>> Logon ID: (0x0,0x98CDE) >>>> Privileges: SeSecurityPrivilege >>>> SeBackupPrivilege >>>> SeRestorePrivilege >>>> SeTakeOwnershipPrivilege >>>> SeDebugPrivilege >>>> SeSystemEnvironmentPrivilege >>>> SeLoadDriverPrivilege >>>> SeImpersonatePrivilege >>>> >>>> --- LOG 2 -- >>>> Event Type: Success Audit >>>> Event Source: Security >>>> Event Category: Logon/Logoff >>>> Event ID: 540 >>>> Date: 7/24/2007 >>>> Time: 10:43:06 AM >>>> User: NT AUTHORITY\SYSTEM >>>> Computer: TPISAPPSVR01 >>>> Description: >>>> Successful Network Logon: >>>> User Name: TPISAPPSVR01$ >>>> Domain: TPIS >>>> Logon ID: (0x0,0x98CDE) >>>> Logon Type: 3 >>>> Logon Process: Kerberos >>>> Authentication Package: Kerberos >>>> Workstation Name: >>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>>> Caller User Name: - >>>> Caller Domain: - >>>> Caller Logon ID: - >>>> Caller Process ID: - >>>> Transited Services: - >>>> Source Network Address: - >>>> Source Port: - >>>> >>>> -- LOG 3 -- >>>> Event Type: Success Audit >>>> Event Source: Security >>>> Event Category: Logon/Logoff >>>> Event ID: 538 >>>> Date: 7/24/2007 >>>> Time: 10:43:06 AM >>>> User: NT AUTHORITY\SYSTEM >>>> Computer: TPISAPPSVR01 >>>> Description: >>>> User Logoff: >>>> User Name: TPISAPPSVR01$ >>>> Domain: TPIS >>>> Logon ID: (0x0,0x98CDE) >>>> Logon Type: 3 >>>> >>>> What else should I do? >>>> >>>> Thanks Jeff >>>> >>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in message >>>> >>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>>> >>>> >>>> >>>> > This is a win2k3 server correct? is it a domain controller? What >>>> > error >>>> > message are they receiving when they try to connect? What do the >>>> > event >>>> > logs show when they connect? >>>> >>>> > Jeff Pitsch >>>> > Microsoft MVP - Terminal Server >>>> > Citrix Technology Professional >>>> > Provision Networks VIP >>>> >>>> > Forums not enough? >>>> > Get support from the experts at your business >>>> >http://jeffpitschconsulting.com >>>> >>>> > Rene B wrote: >>>> >> Hello everybody, >>>> >>>> >> I have problem accessing TS with RDC as any other user diferent than >>>> >> administrator even if the user is part of the administrators group.- >>>> >> Hide quoted text - >>>> >>>> - Show quoted text - >>> >>> >> >> >
Guest Vera Noest [MVP] Posted July 25, 2007 Posted July 25, 2007 Re: users can not access TS PLEASE HELP That's the service which keeps track of the Windows CALs (not the Terminal Server CALs). It's notorious for its false alarms, and should be stopped and disabled on all 2003 servers. You need to have enough server CALs, of course. Documented here: 824196 - Description of the License Logging Service in Windows Server Operating Systems http://support.microsoft.com/?kbid=824196 But this should be the default, at least on 2003 SP1 and later. Which SP are you running on these servers? _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 25 jul 2007 in microsoft.public.windows.terminal_services: > IT is Windows XP sp2. > > I found a problem, when I tried to check the Linceses on the > server (Administrative Tools/Licensing) I got an error: > > "The License Logging Service is not running on > \\servidor.domain01.local, or \\servidor.domain01.local is not > accessible." > > The same error I got in both servers. > > Thanks > > "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in > message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl... >> Rene, >> you have: >> "User1: member of Domain Users, Remote Desktop User, >> Administrators" "User2: member of Domain Users, Remote >> Desktop User" >> >> do you mean you added User1 and User1 to Server2 as Remote >> Desktop users, and User1 to Server2 as Administrators? If its >> true, you're doing the right thing, you should be able to ts to >> Server2 with User1 and User2. >> >> What are your client machines OS and hardware? >> >> >> Thanks >> Soo Kuan >> >> >> >> >> >> -- >> This posting is provided "AS IS" with no warranties, and >> confers no rights. >> >> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in >> message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... >>> Still having the problem, >>> >>> Thanks >>> >>> <roberto.reynoso@gmail.com> wrote in message >>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >>>> Please let me know if you still need help with? I might be >>>> able to help based on the email below. >>>> >>>> I will check my email first thing tomorrow morning 07/24/02 >>>> >>>> Roberto >>>> >>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >>>> no...@beckerstaxservice.com> wrote: >>>>> Sorry that I post it again, but my boss is pushing for a >>>>> solution to it, can >>>>> sombeody help me ! >>>>> >>>>> This is my configuration: >>>>> >>>>> MDC Server1 (TS License Server) (W2k3) >>>>> member server Server2 TS Application mode (W2k3) no DC >>>>> Licensing: Per User (5 cals installed) >>>>> Local Policy: Allow log on through Terminal Services = >>>>> Administrators, Remote Desktop Users >>>>> >>>>> User1: member of Domain Users, Remote Desktop User, >>>>> Administrators User2: member of Domain Users, Remote Desktop >>>>> User >>>>> >>>>> non of the users can access TS remotely, users can login >>>>> locally on TS >>>>> >>>>> error: "To log on this remote computer, you must be granted >>>>> the Allow Log on >>>>> through Terminal Services rigtht. By default , members of >>>>> the Remote Desktop >>>>> Users group have ....." >>>>> >>>>> Event Log after try to connect to TS: >>>>> just secuity shows events >>>>> Security: >>>>> --- LOG 1: --- >>>>> Event Type: Success Audit >>>>> Event Source: Security >>>>> Event Category: Logon/Logoff >>>>> Event ID: 576 >>>>> Date: 7/24/2007 >>>>> Time: 10:43:06 AM >>>>> User: NT AUTHORITY\SYSTEM >>>>> Computer: TPISAPPSVR01 >>>>> Description: >>>>> Special privileges assigned to new logon: >>>>> User Name: TPISAPPSVR01$ >>>>> Domain: TPIS >>>>> Logon ID: (0x0,0x98CDE) >>>>> Privileges: SeSecurityPrivilege >>>>> SeBackupPrivilege >>>>> SeRestorePrivilege >>>>> SeTakeOwnershipPrivilege >>>>> SeDebugPrivilege >>>>> SeSystemEnvironmentPrivilege >>>>> SeLoadDriverPrivilege >>>>> SeImpersonatePrivilege >>>>> >>>>> --- LOG 2 -- >>>>> Event Type: Success Audit >>>>> Event Source: Security >>>>> Event Category: Logon/Logoff >>>>> Event ID: 540 >>>>> Date: 7/24/2007 >>>>> Time: 10:43:06 AM >>>>> User: NT AUTHORITY\SYSTEM >>>>> Computer: TPISAPPSVR01 >>>>> Description: >>>>> Successful Network Logon: >>>>> User Name: TPISAPPSVR01$ >>>>> Domain: TPIS >>>>> Logon ID: (0x0,0x98CDE) >>>>> Logon Type: 3 >>>>> Logon Process: Kerberos >>>>> Authentication Package: Kerberos >>>>> Workstation Name: >>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>>>> Caller User Name: - >>>>> Caller Domain: - >>>>> Caller Logon ID: - >>>>> Caller Process ID: - >>>>> Transited Services: - >>>>> Source Network Address: - >>>>> Source Port: - >>>>> >>>>> -- LOG 3 -- >>>>> Event Type: Success Audit >>>>> Event Source: Security >>>>> Event Category: Logon/Logoff >>>>> Event ID: 538 >>>>> Date: 7/24/2007 >>>>> Time: 10:43:06 AM >>>>> User: NT AUTHORITY\SYSTEM >>>>> Computer: TPISAPPSVR01 >>>>> Description: >>>>> User Logoff: >>>>> User Name: TPISAPPSVR01$ >>>>> Domain: TPIS >>>>> Logon ID: (0x0,0x98CDE) >>>>> Logon Type: 3 >>>>> >>>>> What else should I do? >>>>> >>>>> Thanks Jeff >>>>> >>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in >>>>> message >>>>> >>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>>>> >>>>> >>>>> >>>>> > This is a win2k3 server correct? is it a domain >>>>> > controller? What error >>>>> > message are they receiving when they try to connect? What >>>>> > do the event >>>>> > logs show when they connect? >>>>> >>>>> > Jeff Pitsch >>>>> > Microsoft MVP - Terminal Server >>>>> > Citrix Technology Professional >>>>> > Provision Networks VIP >>>>> >>>>> > Forums not enough? >>>>> > Get support from the experts at your business >>>>> >http://jeffpitschconsulting.com >>>>> >>>>> > Rene B wrote: >>>>> >> Hello everybody, >>>>> >>>>> >> I have problem accessing TS with RDC as any other user >>>>> >> diferent than administrator even if the user is part of >>>>> >> the administrators group.- Hide quoted text - >>>>> >>>>> - Show quoted text -
Guest Rene B Posted July 26, 2007 Posted July 26, 2007 Re: users can not access TS PLEASE HELP I got about the License Logging service, thanks. Yes I check the termianls server licensing and every thing is ok (active and running) I have user 5 cals installed already. "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16... > That's the service which keeps track of the Windows CALs (not the > Terminal Server CALs). It's notorious for its false alarms, and > should be stopped and disabled on all 2003 servers. You need to > have enough server CALs, of course. > > Documented here: > > 824196 - Description of the License Logging Service in Windows > Server Operating Systems > http://support.microsoft.com/?kbid=824196 > > But this should be the default, at least on 2003 SP1 and later. > Which SP are you running on these servers? > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 25 > jul 2007 in microsoft.public.windows.terminal_services: > >> IT is Windows XP sp2. >> >> I found a problem, when I tried to check the Linceses on the >> server (Administrative Tools/Licensing) I got an error: >> >> "The License Logging Service is not running on >> \\servidor.domain01.local, or \\servidor.domain01.local is not >> accessible." >> >> The same error I got in both servers. >> >> Thanks >> >> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in >> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl... >>> Rene, >>> you have: >>> "User1: member of Domain Users, Remote Desktop User, >>> Administrators" "User2: member of Domain Users, Remote >>> Desktop User" >>> >>> do you mean you added User1 and User1 to Server2 as Remote >>> Desktop users, and User1 to Server2 as Administrators? If its >>> true, you're doing the right thing, you should be able to ts to >>> Server2 with User1 and User2. >>> >>> What are your client machines OS and hardware? >>> >>> >>> Thanks >>> Soo Kuan >>> >>> >>> >>> >>> >>> -- >>> This posting is provided "AS IS" with no warranties, and >>> confers no rights. >>> >>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote in >>> message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... >>>> Still having the problem, >>>> >>>> Thanks >>>> >>>> <roberto.reynoso@gmail.com> wrote in message >>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >>>>> Please let me know if you still need help with? I might be >>>>> able to help based on the email below. >>>>> >>>>> I will check my email first thing tomorrow morning 07/24/02 >>>>> >>>>> Roberto >>>>> >>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >>>>> no...@beckerstaxservice.com> wrote: >>>>>> Sorry that I post it again, but my boss is pushing for a >>>>>> solution to it, can >>>>>> sombeody help me ! >>>>>> >>>>>> This is my configuration: >>>>>> >>>>>> MDC Server1 (TS License Server) (W2k3) >>>>>> member server Server2 TS Application mode (W2k3) no DC >>>>>> Licensing: Per User (5 cals installed) >>>>>> Local Policy: Allow log on through Terminal Services = >>>>>> Administrators, Remote Desktop Users >>>>>> >>>>>> User1: member of Domain Users, Remote Desktop User, >>>>>> Administrators User2: member of Domain Users, Remote Desktop >>>>>> User >>>>>> >>>>>> non of the users can access TS remotely, users can login >>>>>> locally on TS >>>>>> >>>>>> error: "To log on this remote computer, you must be granted >>>>>> the Allow Log on >>>>>> through Terminal Services rigtht. By default , members of >>>>>> the Remote Desktop >>>>>> Users group have ....." >>>>>> >>>>>> Event Log after try to connect to TS: >>>>>> just secuity shows events >>>>>> Security: >>>>>> --- LOG 1: --- >>>>>> Event Type: Success Audit >>>>>> Event Source: Security >>>>>> Event Category: Logon/Logoff >>>>>> Event ID: 576 >>>>>> Date: 7/24/2007 >>>>>> Time: 10:43:06 AM >>>>>> User: NT AUTHORITY\SYSTEM >>>>>> Computer: TPISAPPSVR01 >>>>>> Description: >>>>>> Special privileges assigned to new logon: >>>>>> User Name: TPISAPPSVR01$ >>>>>> Domain: TPIS >>>>>> Logon ID: (0x0,0x98CDE) >>>>>> Privileges: SeSecurityPrivilege >>>>>> SeBackupPrivilege >>>>>> SeRestorePrivilege >>>>>> SeTakeOwnershipPrivilege >>>>>> SeDebugPrivilege >>>>>> SeSystemEnvironmentPrivilege >>>>>> SeLoadDriverPrivilege >>>>>> SeImpersonatePrivilege >>>>>> >>>>>> --- LOG 2 -- >>>>>> Event Type: Success Audit >>>>>> Event Source: Security >>>>>> Event Category: Logon/Logoff >>>>>> Event ID: 540 >>>>>> Date: 7/24/2007 >>>>>> Time: 10:43:06 AM >>>>>> User: NT AUTHORITY\SYSTEM >>>>>> Computer: TPISAPPSVR01 >>>>>> Description: >>>>>> Successful Network Logon: >>>>>> User Name: TPISAPPSVR01$ >>>>>> Domain: TPIS >>>>>> Logon ID: (0x0,0x98CDE) >>>>>> Logon Type: 3 >>>>>> Logon Process: Kerberos >>>>>> Authentication Package: Kerberos >>>>>> Workstation Name: >>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>>>>> Caller User Name: - >>>>>> Caller Domain: - >>>>>> Caller Logon ID: - >>>>>> Caller Process ID: - >>>>>> Transited Services: - >>>>>> Source Network Address: - >>>>>> Source Port: - >>>>>> >>>>>> -- LOG 3 -- >>>>>> Event Type: Success Audit >>>>>> Event Source: Security >>>>>> Event Category: Logon/Logoff >>>>>> Event ID: 538 >>>>>> Date: 7/24/2007 >>>>>> Time: 10:43:06 AM >>>>>> User: NT AUTHORITY\SYSTEM >>>>>> Computer: TPISAPPSVR01 >>>>>> Description: >>>>>> User Logoff: >>>>>> User Name: TPISAPPSVR01$ >>>>>> Domain: TPIS >>>>>> Logon ID: (0x0,0x98CDE) >>>>>> Logon Type: 3 >>>>>> >>>>>> What else should I do? >>>>>> >>>>>> Thanks Jeff >>>>>> >>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in >>>>>> message >>>>>> >>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>>>>> >>>>>> >>>>>> >>>>>> > This is a win2k3 server correct? is it a domain >>>>>> > controller? What error >>>>>> > message are they receiving when they try to connect? What >>>>>> > do the event >>>>>> > logs show when they connect? >>>>>> >>>>>> > Jeff Pitsch >>>>>> > Microsoft MVP - Terminal Server >>>>>> > Citrix Technology Professional >>>>>> > Provision Networks VIP >>>>>> >>>>>> > Forums not enough? >>>>>> > Get support from the experts at your business >>>>>> >http://jeffpitschconsulting.com >>>>>> >>>>>> > Rene B wrote: >>>>>> >> Hello everybody, >>>>>> >>>>>> >> I have problem accessing TS with RDC as any other user >>>>>> >> diferent than administrator even if the user is part of >>>>>> >> the administrators group.- Hide quoted text - >>>>>> >>>>>> - Show quoted text -
Guest Vera Noest [MVP] Posted July 26, 2007 Posted July 26, 2007 Re: users can not access TS PLEASE HELP I see in a newer post from you that you have solved the accessibility problem now, is that correct? So we can stop posting to this thread? _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 26 jul 2007 in microsoft.public.windows.terminal_services: > I got about the License Logging service, thanks. > > Yes I check the termianls server licensing and every thing is ok > (active and running) I have user 5 cals installed already. > > > "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote > in message > news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16... >> That's the service which keeps track of the Windows CALs (not >> the Terminal Server CALs). It's notorious for its false alarms, >> and should be stopped and disabled on all 2003 servers. You >> need to have enough server CALs, of course. >> >> Documented here: >> >> 824196 - Description of the License Logging Service in Windows >> Server Operating Systems >> http://support.microsoft.com/?kbid=824196 >> >> But this should be the default, at least on 2003 SP1 and later. >> Which SP are you running on these servers? >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on >> 25 jul 2007 in microsoft.public.windows.terminal_services: >> >>> IT is Windows XP sp2. >>> >>> I found a problem, when I tried to check the Linceses on the >>> server (Administrative Tools/Licensing) I got an error: >>> >>> "The License Logging Service is not running on >>> \\servidor.domain01.local, or \\servidor.domain01.local is not >>> accessible." >>> >>> The same error I got in both servers. >>> >>> Thanks >>> >>> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in >>> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl... >>>> Rene, >>>> you have: >>>> "User1: member of Domain Users, Remote Desktop User, >>>> Administrators" "User2: member of Domain Users, Remote >>>> Desktop User" >>>> >>>> do you mean you added User1 and User1 to Server2 as Remote >>>> Desktop users, and User1 to Server2 as Administrators? If its >>>> true, you're doing the right thing, you should be able to ts >>>> to Server2 with User1 and User2. >>>> >>>> What are your client machines OS and hardware? >>>> >>>> >>>> Thanks >>>> Soo Kuan >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> This posting is provided "AS IS" with no warranties, and >>>> confers no rights. >>>> >>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote >>>> in message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... >>>>> Still having the problem, >>>>> >>>>> Thanks >>>>> >>>>> <roberto.reynoso@gmail.com> wrote in message >>>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >>>>>> Please let me know if you still need help with? I might be >>>>>> able to help based on the email below. >>>>>> >>>>>> I will check my email first thing tomorrow morning 07/24/02 >>>>>> >>>>>> Roberto >>>>>> >>>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >>>>>> no...@beckerstaxservice.com> wrote: >>>>>>> Sorry that I post it again, but my boss is pushing for a >>>>>>> solution to it, can >>>>>>> sombeody help me ! >>>>>>> >>>>>>> This is my configuration: >>>>>>> >>>>>>> MDC Server1 (TS License Server) (W2k3) >>>>>>> member server Server2 TS Application mode (W2k3) no DC >>>>>>> Licensing: Per User (5 cals installed) >>>>>>> Local Policy: Allow log on through Terminal Services = >>>>>>> Administrators, Remote Desktop Users >>>>>>> >>>>>>> User1: member of Domain Users, Remote Desktop User, >>>>>>> Administrators User2: member of Domain Users, Remote >>>>>>> Desktop User >>>>>>> >>>>>>> non of the users can access TS remotely, users can login >>>>>>> locally on TS >>>>>>> >>>>>>> error: "To log on this remote computer, you must be >>>>>>> granted the Allow Log on >>>>>>> through Terminal Services rigtht. By default , members of >>>>>>> the Remote Desktop >>>>>>> Users group have ....." >>>>>>> >>>>>>> Event Log after try to connect to TS: >>>>>>> just secuity shows events >>>>>>> Security: >>>>>>> --- LOG 1: --- >>>>>>> Event Type: Success Audit >>>>>>> Event Source: Security >>>>>>> Event Category: Logon/Logoff >>>>>>> Event ID: 576 >>>>>>> Date: 7/24/2007 >>>>>>> Time: 10:43:06 AM >>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>> Computer: TPISAPPSVR01 >>>>>>> Description: >>>>>>> Special privileges assigned to new logon: >>>>>>> User Name: TPISAPPSVR01$ >>>>>>> Domain: TPIS >>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>> Privileges: SeSecurityPrivilege >>>>>>> SeBackupPrivilege >>>>>>> SeRestorePrivilege >>>>>>> SeTakeOwnershipPrivilege >>>>>>> SeDebugPrivilege >>>>>>> SeSystemEnvironmentPrivilege >>>>>>> SeLoadDriverPrivilege >>>>>>> SeImpersonatePrivilege >>>>>>> >>>>>>> --- LOG 2 -- >>>>>>> Event Type: Success Audit >>>>>>> Event Source: Security >>>>>>> Event Category: Logon/Logoff >>>>>>> Event ID: 540 >>>>>>> Date: 7/24/2007 >>>>>>> Time: 10:43:06 AM >>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>> Computer: TPISAPPSVR01 >>>>>>> Description: >>>>>>> Successful Network Logon: >>>>>>> User Name: TPISAPPSVR01$ >>>>>>> Domain: TPIS >>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>> Logon Type: 3 >>>>>>> Logon Process: Kerberos >>>>>>> Authentication Package: Kerberos >>>>>>> Workstation Name: >>>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>>>>>> Caller User Name: - >>>>>>> Caller Domain: - >>>>>>> Caller Logon ID: - >>>>>>> Caller Process ID: - >>>>>>> Transited Services: - >>>>>>> Source Network Address: - >>>>>>> Source Port: - >>>>>>> >>>>>>> -- LOG 3 -- >>>>>>> Event Type: Success Audit >>>>>>> Event Source: Security >>>>>>> Event Category: Logon/Logoff >>>>>>> Event ID: 538 >>>>>>> Date: 7/24/2007 >>>>>>> Time: 10:43:06 AM >>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>> Computer: TPISAPPSVR01 >>>>>>> Description: >>>>>>> User Logoff: >>>>>>> User Name: TPISAPPSVR01$ >>>>>>> Domain: TPIS >>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>> Logon Type: 3 >>>>>>> >>>>>>> What else should I do? >>>>>>> >>>>>>> Thanks Jeff >>>>>>> >>>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in >>>>>>> message >>>>>>> >>>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>>>>>> >>>>>>> >>>>>>> >>>>>>> > This is a win2k3 server correct? is it a domain >>>>>>> > controller? What error >>>>>>> > message are they receiving when they try to connect? >>>>>>> > What do the event >>>>>>> > logs show when they connect? >>>>>>> >>>>>>> > Jeff Pitsch >>>>>>> > Microsoft MVP - Terminal Server >>>>>>> > Citrix Technology Professional >>>>>>> > Provision Networks VIP >>>>>>> >>>>>>> > Forums not enough? >>>>>>> > Get support from the experts at your business >>>>>>> >http://jeffpitschconsulting.com >>>>>>> >>>>>>> > Rene B wrote: >>>>>>> >> Hello everybody, >>>>>>> >>>>>>> >> I have problem accessing TS with RDC as any other user >>>>>>> >> diferent than administrator even if the user is part of >>>>>>> >> the administrators group.- Hide quoted text - >>>>>>> >>>>>>> - Show quoted text -
Guest Rene B Posted July 26, 2007 Posted July 26, 2007 Re: users can not access TS PLEASE HELP Yes, I got the TS working thanks to everyone. I access your website, it is full of good information Thank you Vera "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message news:Xns9979E31DBB6E1veranoesthemutforsse@207.46.248.16... >I see in a newer post from you that you have solved the > accessibility problem now, is that correct? So we can stop posting > to this thread? > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on 26 > jul 2007 in microsoft.public.windows.terminal_services: > >> I got about the License Logging service, thanks. >> >> Yes I check the termianls server licensing and every thing is ok >> (active and running) I have user 5 cals installed already. >> >> >> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote >> in message >> news:Xns9978E46BC9A2Bveranoesthemutforsse@207.46.248.16... >>> That's the service which keeps track of the Windows CALs (not >>> the Terminal Server CALs). It's notorious for its false alarms, >>> and should be stopped and disabled on all 2003 servers. You >>> need to have enough server CALs, of course. >>> >>> Documented here: >>> >>> 824196 - Description of the License Logging Service in Windows >>> Server Operating Systems >>> http://support.microsoft.com/?kbid=824196 >>> >>> But this should be the default, at least on 2003 SP1 and later. >>> Which SP are you running on these servers? >>> >>> _________________________________________________________ >>> Vera Noest >>> MCSE, CCEA, Microsoft MVP - Terminal Server >>> TS troubleshooting: http://ts.veranoest.net >>> ___ please respond in newsgroup, NOT by private email ___ >>> >>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote on >>> 25 jul 2007 in microsoft.public.windows.terminal_services: >>> >>>> IT is Windows XP sp2. >>>> >>>> I found a problem, when I tried to check the Linceses on the >>>> server (Administrative Tools/Licensing) I got an error: >>>> >>>> "The License Logging Service is not running on >>>> \\servidor.domain01.local, or \\servidor.domain01.local is not >>>> accessible." >>>> >>>> The same error I got in both servers. >>>> >>>> Thanks >>>> >>>> "Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in >>>> message news:OFQ%23pTtzHHA.2312@TK2MSFTNGP05.phx.gbl... >>>>> Rene, >>>>> you have: >>>>> "User1: member of Domain Users, Remote Desktop User, >>>>> Administrators" "User2: member of Domain Users, Remote >>>>> Desktop User" >>>>> >>>>> do you mean you added User1 and User1 to Server2 as Remote >>>>> Desktop users, and User1 to Server2 as Administrators? If its >>>>> true, you're doing the right thing, you should be able to ts >>>>> to Server2 with User1 and User2. >>>>> >>>>> What are your client machines OS and hardware? >>>>> >>>>> >>>>> Thanks >>>>> Soo Kuan >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> This posting is provided "AS IS" with no warranties, and >>>>> confers no rights. >>>>> >>>>> "Rene B" <R-E-N-E-B-esto-no-va@beckerstaxservice.com> wrote >>>>> in message news:uI9OSvszHHA.1484@TK2MSFTNGP06.phx.gbl... >>>>>> Still having the problem, >>>>>> >>>>>> Thanks >>>>>> >>>>>> <roberto.reynoso@gmail.com> wrote in message >>>>>> news:1185331057.574180.268460@q75g2000hsh.googlegroups.com... >>>>>>> Please let me know if you still need help with? I might be >>>>>>> able to help based on the email below. >>>>>>> >>>>>>> I will check my email first thing tomorrow morning 07/24/02 >>>>>>> >>>>>>> Roberto >>>>>>> >>>>>>> On Jul 24, 3:21 pm, "Rene B" <R-E-N-E-B-esto- >>>>>>> no...@beckerstaxservice.com> wrote: >>>>>>>> Sorry that I post it again, but my boss is pushing for a >>>>>>>> solution to it, can >>>>>>>> sombeody help me ! >>>>>>>> >>>>>>>> This is my configuration: >>>>>>>> >>>>>>>> MDC Server1 (TS License Server) (W2k3) >>>>>>>> member server Server2 TS Application mode (W2k3) no DC >>>>>>>> Licensing: Per User (5 cals installed) >>>>>>>> Local Policy: Allow log on through Terminal Services = >>>>>>>> Administrators, Remote Desktop Users >>>>>>>> >>>>>>>> User1: member of Domain Users, Remote Desktop User, >>>>>>>> Administrators User2: member of Domain Users, Remote >>>>>>>> Desktop User >>>>>>>> >>>>>>>> non of the users can access TS remotely, users can login >>>>>>>> locally on TS >>>>>>>> >>>>>>>> error: "To log on this remote computer, you must be >>>>>>>> granted the Allow Log on >>>>>>>> through Terminal Services rigtht. By default , members of >>>>>>>> the Remote Desktop >>>>>>>> Users group have ....." >>>>>>>> >>>>>>>> Event Log after try to connect to TS: >>>>>>>> just secuity shows events >>>>>>>> Security: >>>>>>>> --- LOG 1: --- >>>>>>>> Event Type: Success Audit >>>>>>>> Event Source: Security >>>>>>>> Event Category: Logon/Logoff >>>>>>>> Event ID: 576 >>>>>>>> Date: 7/24/2007 >>>>>>>> Time: 10:43:06 AM >>>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>>> Computer: TPISAPPSVR01 >>>>>>>> Description: >>>>>>>> Special privileges assigned to new logon: >>>>>>>> User Name: TPISAPPSVR01$ >>>>>>>> Domain: TPIS >>>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>>> Privileges: SeSecurityPrivilege >>>>>>>> SeBackupPrivilege >>>>>>>> SeRestorePrivilege >>>>>>>> SeTakeOwnershipPrivilege >>>>>>>> SeDebugPrivilege >>>>>>>> SeSystemEnvironmentPrivilege >>>>>>>> SeLoadDriverPrivilege >>>>>>>> SeImpersonatePrivilege >>>>>>>> >>>>>>>> --- LOG 2 -- >>>>>>>> Event Type: Success Audit >>>>>>>> Event Source: Security >>>>>>>> Event Category: Logon/Logoff >>>>>>>> Event ID: 540 >>>>>>>> Date: 7/24/2007 >>>>>>>> Time: 10:43:06 AM >>>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>>> Computer: TPISAPPSVR01 >>>>>>>> Description: >>>>>>>> Successful Network Logon: >>>>>>>> User Name: TPISAPPSVR01$ >>>>>>>> Domain: TPIS >>>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>>> Logon Type: 3 >>>>>>>> Logon Process: Kerberos >>>>>>>> Authentication Package: Kerberos >>>>>>>> Workstation Name: >>>>>>>> Logon GUID: {31757886-c57c-2b85-f649-1f4648bf9e0d} >>>>>>>> Caller User Name: - >>>>>>>> Caller Domain: - >>>>>>>> Caller Logon ID: - >>>>>>>> Caller Process ID: - >>>>>>>> Transited Services: - >>>>>>>> Source Network Address: - >>>>>>>> Source Port: - >>>>>>>> >>>>>>>> -- LOG 3 -- >>>>>>>> Event Type: Success Audit >>>>>>>> Event Source: Security >>>>>>>> Event Category: Logon/Logoff >>>>>>>> Event ID: 538 >>>>>>>> Date: 7/24/2007 >>>>>>>> Time: 10:43:06 AM >>>>>>>> User: NT AUTHORITY\SYSTEM >>>>>>>> Computer: TPISAPPSVR01 >>>>>>>> Description: >>>>>>>> User Logoff: >>>>>>>> User Name: TPISAPPSVR01$ >>>>>>>> Domain: TPIS >>>>>>>> Logon ID: (0x0,0x98CDE) >>>>>>>> Logon Type: 3 >>>>>>>> >>>>>>>> What else should I do? >>>>>>>> >>>>>>>> Thanks Jeff >>>>>>>> >>>>>>>> "Jeff Pitsch" <J...@Jeffpitschconsulting.com> wrote in >>>>>>>> message >>>>>>>> >>>>>>>> news:e5jV6zfzHHA.464@TK2MSFTNGP02.phx.gbl... >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> > This is a win2k3 server correct? is it a domain >>>>>>>> > controller? What error >>>>>>>> > message are they receiving when they try to connect? >>>>>>>> > What do the event >>>>>>>> > logs show when they connect? >>>>>>>> >>>>>>>> > Jeff Pitsch >>>>>>>> > Microsoft MVP - Terminal Server >>>>>>>> > Citrix Technology Professional >>>>>>>> > Provision Networks VIP >>>>>>>> >>>>>>>> > Forums not enough? >>>>>>>> > Get support from the experts at your business >>>>>>>> >http://jeffpitschconsulting.com >>>>>>>> >>>>>>>> > Rene B wrote: >>>>>>>> >> Hello everybody, >>>>>>>> >>>>>>>> >> I have problem accessing TS with RDC as any other user >>>>>>>> >> diferent than administrator even if the user is part of >>>>>>>> >> the administrators group.- Hide quoted text - >>>>>>>> >>>>>>>> - Show quoted text -
Recommended Posts