where to give access to terminal server

[Guest Davorin Scharping]

Hello,

 

I am wondering where I have to grant access to terminal services.

I added the user to the group "Remotedesktopbenutzer" which should have the

right to log in on terminal servers.

But the users are not allowed to do that.

Where do I have to grant rights within my domain?

Through "Domain Controller Security Policy" or through "Domain Security

Policy"?

 

Thanks

Davorin

[Guest Vera Noest [MVP]]

Re: where to give access to terminal server

 

Your TS is not running on a Domain Controller, is it?

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

"Davorin Scharping" <scharping@kellyservices.de> wrote on 28 dec

2007:

> Hello,

>

> I am wondering where I have to grant access to terminal

> services. I added the user to the group "Remotedesktopbenutzer"

> which should have the right to log in on terminal servers.

> But the users are not allowed to do that.

> Where do I have to grant rights within my domain?

> Through "Domain Controller Security Policy" or through "Domain

> Security Policy"?

>

> Thanks

> Davorin

[Guest Davorin Scharping]

Re: where to give access to terminal server

 

> Your TS is not running on a Domain Controller, is it?

No, it is running on two servers 2003 SP2 which are only part of the domain

but no DC.

[Guest Vera Noest [MVP]]

Re: where to give access to terminal server

 

Then all you should have to do is to make the users members of the

Remote Desktop Users group, i.e. the *local* group on the TS, not

the domain group in AD.

But if you previously have removed default user rights from your

user accounts or groups they belong to, then you'll have to restore

the default rights again.

 

Required rights:

Allow log on through Terminal Services

This user right is by default granted to Administrators and members

of the local Remote Desktop Users group on the server.

 

Permission to use the rdp-tcp connection

The local Remote Desktop Users group has by default "User access"

permission on the rdp-tcp connection.

 

Allow logon to Terminal Server checkbox, in the properties of the

user account in AD.

By default, this checkbox is checked for all users.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

"Davorin Scharping" <scharping@kellyservices.de> wrote on 28 dec

2007:

>> Your TS is not running on a Domain Controller, is it?

> No, it is running on two servers 2003 SP2 which are only part of

> the domain but no DC.

[Guest Davorin Scharping]

Re: where to give access to terminal server

 

> Then all you should have to do is to make the users members of the

> Remote Desktop Users group, i.e. the *local* group on the TS, not

> the domain group in AD.

That was the point :-D

I got it working :-D

 

Thankks a lot.

 

Happy new year!