RDP - Login Problem - Access Is Denied

[Guest Aidan-Eire]

Hi,

 

I am suddenly getting an error when trying to logion to a WIN2K3 server with

RDP authenticating from a domain. The error I get is:

"the system cannot log you on due to the following error. Access is denied"

Sometimes after multiple tries I can login. On google searches I'm seeing

hints towards DNS and active directory. For testing, I created a temporary

local logon on the server in question and can access via RDP with this logon

no problem. Can anyone shed any light on this for me please?

 

Thanks in Advance,

Aidan..

[Guest Vera Noest [MVP]]

Re: RDP - Login Problem - Access Is Denied

 

Can you post the EventID, Source and Description from the EventLog on

the Terminal Server when this occurs?

Is the server a DC or a member server in the domain?

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?QWlkYW4tRWlyZQ==?= <AidanEire@discussions.microsoft.com>

wrote on 06 sep 2007 in

microsoft.public.windows.terminal_services:

> Hi,

>

> I am suddenly getting an error when trying to logion to a WIN2K3

> server with RDP authenticating from a domain. The error I get

> is: "the system cannot log you on due to the following error.

> Access is denied" Sometimes after multiple tries I can login. On

> google searches I'm seeing hints towards DNS and active

> directory. For testing, I created a temporary local logon on the

> server in question and can access via RDP with this logon no

> problem. Can anyone shed any light on this for me please?

>

> Thanks in Advance,

> Aidan..

[Guest Aidan-Eire]

Re: RDP - Login Problem - Access Is Denied

 

Hi Vera,

 

Thanks for your reply. The host is a member server and not the DC. Event

details:

 

Event Type: Error

Event Source: Winlogon

Event Category: None

Event ID: 1219

Date: 06/09/2007

Time: 14:57:27

User: N/A

Description:

Logon rejected for <domainname>\administrator. Unable to obtain Terminal

Server User Configuration. Error: Access is denied.

Data:

0000: 05 00 00 00 ....

 

Thanks,

Aidan..

 

"Vera Noest [MVP]" wrote:

> Can you post the EventID, Source and Description from the EventLog on

> the Terminal Server when this occurs?

> Is the server a DC or a member server in the domain?

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?QWlkYW4tRWlyZQ==?= <AidanEire@discussions.microsoft.com>

> wrote on 06 sep 2007 in

> microsoft.public.windows.terminal_services:

>

> > Hi,

> >

> > I am suddenly getting an error when trying to logion to a WIN2K3

> > server with RDP authenticating from a domain. The error I get

> > is: "the system cannot log you on due to the following error.

> > Access is denied" Sometimes after multiple tries I can login. On

> > google searches I'm seeing hints towards DNS and active

> > directory. For testing, I created a temporary local logon on the

> > server in question and can access via RDP with this logon no

> > problem. Can anyone shed any light on this for me please?

> >

> > Thanks in Advance,

> > Aidan..

>

[Guest Aidan-Eire]

Re: RDP - Login Problem - Access Is Denied

 

 

Also, FYI this is an intermittent problem, login fails 9 times out of 10.

[Guest Vera Noest [MVP]]

Re: RDP - Login Problem - Access Is Denied

 

Is the server running SP2 with the latest updates?

 

Check if the workaround described here solves the problem:

http://support.microsoft.com/?kbid=815266

 

However, that only tells the server to ignore errors while reading

the Terminal Services Configuration data, so it's not a real

solution.

 

Is the server multi-homed (more than 1 NIC)? If so, make sure that

the NIC you have configured for RDP is the first adapter in the

binding order in Network connections. And disable network teaming,

if you have multiple NICs.

 

EventID.net lists some more options:

http://www.eventid.net/display.asp?eventid=1219&eventno=2848

&source=Winlogon&phase=1

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?QWlkYW4tRWlyZQ==?= <AidanEire@discussions.microsoft.com>

wrote on 06 sep 2007 in

microsoft.public.windows.terminal_services:

> Hi Vera,

>

> Thanks for your reply. The host is a member server and not the

> DC. Event details:

>

> Event Type: Error

> Event Source: Winlogon

> Event Category: None

> Event ID: 1219

> Date: 06/09/2007

> Time: 14:57:27

> User: N/A

> Description:

> Logon rejected for <domainname>\administrator. Unable to obtain

> Terminal Server User Configuration. Error: Access is denied.

> Data:

> 0000: 05 00 00 00 ....

>

> Thanks,

> Aidan..

>

> "Vera Noest [MVP]" wrote:

>

>> Can you post the EventID, Source and Description from the

>> EventLog on the Terminal Server when this occurs?

>> Is the server a DC or a member server in the domain?

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?QWlkYW4tRWlyZQ==?=

>> <AidanEire@discussions.microsoft.com> wrote on 06 sep 2007 in

>> microsoft.public.windows.terminal_services:

>>

>> > Hi,

>> >

>> > I am suddenly getting an error when trying to logion to a

>> > WIN2K3 server with RDP authenticating from a domain. The

>> > error I get is: "the system cannot log you on due to the

>> > following error. Access is denied" Sometimes after multiple

>> > tries I can login. On google searches I'm seeing hints

>> > towards DNS and active directory. For testing, I created a

>> > temporary local logon on the server in question and can

>> > access via RDP with this logon no problem. Can anyone shed

>> > any light on this for me please?

>> >

>> > Thanks in Advance,

>> > Aidan..