Only Users with Administrator rights can logon to terminal server

[Guest חליל אסלאן]

I have Server 2003 R2, That is Also my terminal server, I need only one

computer login in remotly. I have created license server also on the same

server. I have enabled the remote desktop connection option on the My

computer options, also have add all my five users (domain users) to Remote

Desktop Group. I can logon to termial server only if I give the user the

Administrator rights. I goet an error that the user has no permission to

logon to the server.

 

--

asslan@gmail.com

asslan@bezeqint.net

[Guest Vera Noest [MVP]]

Re: Only Users with Administrator rights can logon to terminal server

 

Maybe the server is a DC? Then this is by design.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

=?Utf-8?B?15fXnNeZ15wg15DXodec15DXnw==?= <asslan@gmail.com> wrote

on 30 nov 2007:

> I have Server 2003 R2, That is Also my terminal server, I need

> only one computer login in remotly. I have created license

> server also on the same server. I have enabled the remote

> desktop connection option on the My computer options, also have

> add all my five users (domain users) to Remote Desktop Group. I

> can logon to termial server only if I give the user the

> Administrator rights. I goet an error that the user has no

> permission to logon to the server.

[Guest חליל אסלאן]

Re: Only Users with Administrator rights can logon to terminal ser

 

Re: Only Users with Administrator rights can logon to terminal ser

 

Yes the The Server is Hosting the Active Directory also, it is a small office

5PC's and One Server that work as Active direcotry, File server, Terminal

Server, License Server and one remote PC. Is there a way to chnage this

behavior, that is not to give the remote terminal user adminstrator rights. ??

--

asslan@gmail.com

asslan@bezeqint.net

asslan@asslans.com

 

 

 

"Vera Noest [MVP]" wrote:

> Maybe the server is a DC? Then this is by design.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> *----------- Please reply in newsgroup -------------*

>

> =?Utf-8?B?15fXnNeZ15wg15DXodec15DXnw==?= <asslan@gmail.com> wrote

> on 30 nov 2007:

>

> > I have Server 2003 R2, That is Also my terminal server, I need

> > only one computer login in remotly. I have created license

> > server also on the same server. I have enabled the remote

> > desktop connection option on the My computer options, also have

> > add all my five users (domain users) to Remote Desktop Group. I

> > can logon to termial server only if I give the user the

> > Administrator rights. I goet an error that the user has no

> > permission to logon to the server.

>

[Guest Vera Noest [MVP]]

Re: Only Users with Administrator rights can logon to terminal ser

 

Re: Only Users with Administrator rights can logon to terminal ser

 

I assume that you understand how risky this setup is?

Your users will be running applications on your DC. If they mess it

up beyond repair, your whole AD domain is gone.

 

That said, try if this works:

 

1. add the users to the built-in domain local Remote Desktop Users

group in AD

2. enable the following setting in the Default Domain Controller

Policy:

Computer Configuration - Windows Settings - Security Settings -

Local Policies - User rights Assignment

"Allow log on through Terminal Services"

and add the Remote Desktop Users group to the list of allowed

users

3. add the Remote Desktop Users group to the permission list of

the rdp-tcp connection

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?15fXnNeZ15wg15DXodec15DXnw==?= <asslan@gmail.com> wrote

on 02 dec 2007 in microsoft.public.windows.terminal_services:

> Yes the The Server is Hosting the Active Directory also, it is a

> small office 5PC's and One Server that work as Active

> direcotry, File server, Terminal Server, License Server and one

> remote PC. Is there a way to chnage this behavior, that is not

> to give the remote terminal user adminstrator rights. ??