TS logon

[Guest Semir Hadzic]

Hi evererybody,

 

I have unusal problem with Terminal servers.

It is a new clean instalation. There is four W2003R2 servers from wich

one is DC, SQL and TS License server and other three servers are

Terminal servers in app mode.All four server are in domain managed by DC on

first server.

Problem is this: Domain Remote desktop Users group can't

logon to TS, the same problem is with administrator. In RDP-tcp

configuration there is

only local Remote desktop users group. I can't put in permisions of RDP-tcp

Domain Remote desktop users.

I baypased that all by creating new group called RDP USER and added new

group in RDP-tcp permisions.

Also changed Domain security policy to allow log on trough terminal

services. But that is only hot-fix.

All three servers can see domain and DC. The group policy is distributed

normal. DNS server (on DC)

working normal. Licences are distributed normal, all works.... All four

servers are new instalation.

 

any suggestions?

please help, thanx

 

Semir

MCSA

[Guest Vera Noest [MVP]]

Re: TS logon

 

Seems that your RDP permissions are corrupted.

In Terminal Services Configuration - rdp-tcp connection -

permissions - Advanced - click on "Default" button and save.

 

This should restore the default permissions, which give access to

Administrators and the *local* Remote Desktop Users group.

If you have made your users member of the *domain* Remote Desktop

Users group, add this group to each local RDU group to give them

access.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in

microsoft.public.windows.terminal_services:

> Hi evererybody,

>

> I have unusal problem with Terminal servers.

> It is a new clean instalation. There is four W2003R2 servers

> from wich

> one is DC, SQL and TS License server and other three servers

> are

> Terminal servers in app mode.All four server are in domain

> managed by DC on first server.

> Problem is this: Domain Remote desktop Users group can't

> logon to TS, the same problem is with administrator. In RDP-tcp

> configuration there is

> only local Remote desktop users group. I can't put in permisions

> of RDP-tcp Domain Remote desktop users.

> I baypased that all by creating new group called RDP USER and

> added new group in RDP-tcp permisions.

> Also changed Domain security policy to allow log on trough

> terminal services. But that is only hot-fix.

> All three servers can see domain and DC. The group policy is

> distributed normal. DNS server (on DC)

> working normal. Licences are distributed normal, all works....

> All four servers are new instalation.

>

> any suggestions?

> please help, thanx

>

> Semir

> MCSA

[Guest Semir Hadzic]

Re: TS logon

 

Vera,

thanx for your reply.

 

I've tried that, I can't add "doman" remote desktop users group to "local"

Remote desktop users group, it does not permmit me to doo that.

That is problem, it permmit me to add domain users and permmit me to add new

created domain groum (RDP USERS) witch I created before(or other groups)

Could it be problem becaouse servers are R2? Something with global

catalogue? I forgot to mentioned in post before all server are SP2 and all

are up do date.

 

Semir

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message

news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...

> Seems that your RDP permissions are corrupted.

> In Terminal Services Configuration - rdp-tcp connection -

> permissions - Advanced - click on "Default" button and save.

>

> This should restore the default permissions, which give access to

> Administrators and the *local* Remote Desktop Users group.

> If you have made your users member of the *domain* Remote Desktop

> Users group, add this group to each local RDU group to give them

> access.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in

> microsoft.public.windows.terminal_services:

>

>> Hi evererybody,

>>

>> I have unusal problem with Terminal servers.

>> It is a new clean instalation. There is four W2003R2 servers

>> from wich

>> one is DC, SQL and TS License server and other three servers

>> are

>> Terminal servers in app mode.All four server are in domain

>> managed by DC on first server.

>> Problem is this: Domain Remote desktop Users group can't

>> logon to TS, the same problem is with administrator. In RDP-tcp

>> configuration there is

>> only local Remote desktop users group. I can't put in permisions

>> of RDP-tcp Domain Remote desktop users.

>> I baypased that all by creating new group called RDP USER and

>> added new group in RDP-tcp permisions.

>> Also changed Domain security policy to allow log on trough

>> terminal services. But that is only hot-fix.

>> All three servers can see domain and DC. The group policy is

>> distributed normal. DNS server (on DC)

>> working normal. Licences are distributed normal, all works....

>> All four servers are new instalation.

>>

>> any suggestions?

>> please help, thanx

>>

>> Semir

>> MCSA

[Guest Vera Noest [MVP]]

Re: TS logon

 

Do you get an error message when you try to add the group?

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Semir Hadzic" <semir@gradpula.com> wrote on 27 sep 2007 in

microsoft.public.windows.terminal_services:

> Vera,

> thanx for your reply.

>

> I've tried that, I can't add "doman" remote desktop users group

> to "local" Remote desktop users group, it does not permmit me to

> doo that. That is problem, it permmit me to add domain users and

> permmit me to add new created domain groum (RDP USERS) witch I

> created before(or other groups) Could it be problem becaouse

> servers are R2? Something with global catalogue? I forgot to

> mentioned in post before all server are SP2 and all are up do

> date.

>

> Semir

>

> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote

> in message

> news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...

>> Seems that your RDP permissions are corrupted.

>> In Terminal Services Configuration - rdp-tcp connection -

>> permissions - Advanced - click on "Default" button and save.

>>

>> This should restore the default permissions, which give access

>> to Administrators and the *local* Remote Desktop Users group.

>> If you have made your users member of the *domain* Remote

>> Desktop Users group, add this group to each local RDU group to

>> give them access.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in

>> microsoft.public.windows.terminal_services:

>>

>>> Hi evererybody,

>>>

>>> I have unusal problem with Terminal servers.

>>> It is a new clean instalation. There is four W2003R2 servers

>>> from wich

>>> one is DC, SQL and TS License server and other three servers

>>> are

>>> Terminal servers in app mode.All four server are in domain

>>> managed by DC on first server.

>>> Problem is this: Domain Remote desktop Users group can't

>>> logon to TS, the same problem is with administrator. In

>>> RDP-tcp configuration there is

>>> only local Remote desktop users group. I can't put in

>>> permisions of RDP-tcp Domain Remote desktop users.

>>> I baypased that all by creating new group called RDP USER and

>>> added new group in RDP-tcp permisions.

>>> Also changed Domain security policy to allow log on trough

>>> terminal services. But that is only hot-fix.

>>> All three servers can see domain and DC. The group policy is

>>> distributed normal. DNS server (on DC)

>>> working normal. Licences are distributed normal, all works....

>>> All four servers are new instalation.

>>>

>>> any suggestions?

>>> please help, thanx

>>>

>>> Semir

>>> MCSA

[Guest Semir Hadzic]

Re: TS logon

 

If I try to put it manualy by typing it ask me to correct information (like

it was not found in AD), if I tray to put it by browsing users,group or

built in security principals it is not listed there. Firs similar group that

I have seen is TERMINAL SERVER USERS. I have tried to put that Users-Group

but no change.

But when I see on my other servers on other locations it is normal behavior.

There everything work normal. There also you can't put domain rdu group to

security properties op RDP-tcp connections.

I am lost.

 

 

 

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message

news:Xns99B8DC674603Bveranoesthemutforsse@207.46.248.16...

> Do you get an error message when you try to add the group?

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> "Semir Hadzic" <semir@gradpula.com> wrote on 27 sep 2007 in

> microsoft.public.windows.terminal_services:

>

>> Vera,

>> thanx for your reply.

>>

>> I've tried that, I can't add "doman" remote desktop users group

>> to "local" Remote desktop users group, it does not permmit me to

>> doo that. That is problem, it permmit me to add domain users and

>> permmit me to add new created domain groum (RDP USERS) witch I

>> created before(or other groups) Could it be problem becaouse

>> servers are R2? Something with global catalogue? I forgot to

>> mentioned in post before all server are SP2 and all are up do

>> date.

>>

>> Semir

>>

>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote

>> in message

>> news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...

>>> Seems that your RDP permissions are corrupted.

>>> In Terminal Services Configuration - rdp-tcp connection -

>>> permissions - Advanced - click on "Default" button and save.

>>>

>>> This should restore the default permissions, which give access

>>> to Administrators and the *local* Remote Desktop Users group.

>>> If you have made your users member of the *domain* Remote

>>> Desktop Users group, add this group to each local RDU group to

>>> give them access.

>>>

>>> _________________________________________________________

>>> Vera Noest

>>> MCSE, CCEA, Microsoft MVP - Terminal Server

>>> TS troubleshooting: http://ts.veranoest.net

>>> ___ please respond in newsgroup, NOT by private email ___

>>>

>>> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in

>>> microsoft.public.windows.terminal_services:

>>>

>>>> Hi evererybody,

>>>>

>>>> I have unusal problem with Terminal servers.

>>>> It is a new clean instalation. There is four W2003R2 servers

>>>> from wich

>>>> one is DC, SQL and TS License server and other three servers

>>>> are

>>>> Terminal servers in app mode.All four server are in domain

>>>> managed by DC on first server.

>>>> Problem is this: Domain Remote desktop Users group can't

>>>> logon to TS, the same problem is with administrator. In

>>>> RDP-tcp configuration there is

>>>> only local Remote desktop users group. I can't put in

>>>> permisions of RDP-tcp Domain Remote desktop users.

>>>> I baypased that all by creating new group called RDP USER and

>>>> added new group in RDP-tcp permisions.

>>>> Also changed Domain security policy to allow log on trough

>>>> terminal services. But that is only hot-fix.

>>>> All three servers can see domain and DC. The group policy is

>>>> distributed normal. DNS server (on DC)

>>>> working normal. Licences are distributed normal, all works....

>>>> All four servers are new instalation.

>>>>

>>>> any suggestions?

>>>> please help, thanx

>>>>

>>>> Semir

>>>> MCSA