Guest Mark Posted January 24, 2008 Posted January 24, 2008 Server01 is exchange 2003, Server 02 is Application Server with SBS 2003 and Terminal Services,. Statement: Administrators log in via remote to remote wb workplace sign in and go to server01,02 or clients. The application we use is on Server02. Users/remote users, login to renote web wokplace, they see a different menu. # 3 is connect o my companies application and file sharing server. Click go, they see Server02,. they click and it asks for a login. Problem at this point the users, (not admin.) get bounced for Terminal Services permissions. I feel i have done everything correct. thru locla policies etc. What more should I look at. It has been hell. Thanks in advance. All of thier mail and everything else works fine. i juts want them (non-admin) to be able to login to the application Server via remote work place. yes they have been made part od each group. Mark
Guest Mark Posted January 24, 2008 Posted January 24, 2008 RE: Server01 and Server02 I may have that backwords on which server is which.. The problem still exists. Users can't log onto Server 2 from remote web workplace. "Mark" wrote: > Server01 is exchange 2003, Server 02 is Application Server with SBS 2003 and > Terminal Services,. > > Statement: Administrators log in via remote to remote wb workplace sign in > and go to server01,02 or clients. The application we use is on Server02. > > Users/remote users, login to renote web wokplace, they see a different menu. > # 3 is connect o my companies application and file sharing server. Click go, > they see Server02,. they click and it asks for a login. > > Problem at this point the users, (not admin.) get bounced for Terminal > Services permissions. > > I feel i have done everything correct. thru locla policies etc. > > What more should I look at. It has been hell. > > Thanks in advance. All of thier mail and everything else works fine. i juts > want them (non-admin) to be able to login to the application Server via > remote work place. yes they have been made part od each group. > > Mark
Guest Vera Noest [MVP] Posted January 24, 2008 Posted January 24, 2008 Re: Server01 and Server02 An SBS2003 server cannot run Terminal Services. It can only be configured for Remote Desktop for Administration, which means you have 2 connections, for Administrators only. If this doesn't answer your question, I suggest that you post to the sbs newsgroup. They can probably help you much better. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 24 jan 2008 in microsoft.public.windows.terminal_services: > Server01 is exchange 2003, Server 02 is Application Server with > SBS 2003 and Terminal Services,. > > Statement: Administrators log in via remote to remote wb > workplace sign in and go to server01,02 or clients. The > application we use is on Server02. > > Users/remote users, login to renote web wokplace, they see a > different menu. # 3 is connect o my companies application and > file sharing server. Click go, they see Server02,. they click > and it asks for a login. > > Problem at this point the users, (not admin.) get bounced for > Terminal Services permissions. > > I feel i have done everything correct. thru locla policies etc. > > What more should I look at. It has been hell. > > Thanks in advance. All of thier mail and everything else works > fine. i juts want them (non-admin) to be able to login to the > application Server via remote work place. yes they have been > made part od each group. > > Mark
Guest Mark Posted January 24, 2008 Posted January 24, 2008 Re: Server01 and Server02 I said it wrong.. SBS has exchange server 2003 on it. The second server has TS. with 5 lic. It also has our application we run. A user logs into server one and sees a menu. The 3rd selection is what I stated. The application is on Server02 with TS and 5 lic. When the user selects server 2, they are kicked out saying Terminal Services Permissions error. Is this clearer? Even one at a time. "Vera Noest [MVP]" wrote: > An SBS2003 server cannot run Terminal Services. > It can only be configured for Remote Desktop for Administration, > which means you have 2 connections, for Administrators only. > > If this doesn't answer your question, I suggest that you post to > the sbs newsgroup. They can probably help you much better. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 24 > jan 2008 in microsoft.public.windows.terminal_services: > > > Server01 is exchange 2003, Server 02 is Application Server with > > SBS 2003 and Terminal Services,. > > > > Statement: Administrators log in via remote to remote wb > > workplace sign in and go to server01,02 or clients. The > > application we use is on Server02. > > > > Users/remote users, login to renote web wokplace, they see a > > different menu. # 3 is connect o my companies application and > > file sharing server. Click go, they see Server02,. they click > > and it asks for a login. > > > > Problem at this point the users, (not admin.) get bounced for > > Terminal Services permissions. > > > > I feel i have done everything correct. thru locla policies etc. > > > > What more should I look at. It has been hell. > > > > Thanks in advance. All of thier mail and everything else works > > fine. i juts want them (non-admin) to be able to login to the > > application Server via remote work place. yes they have been > > made part od each group. > > > > Mark >
Guest Vera Noest [MVP] Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 Hardly. I suggest again that you post to the sbs newsgroup. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net *----------- Please reply in newsgroup -------------* =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25 jan 2008: > I said it wrong.. > > SBS has exchange server 2003 on it. The second server has TS. > with 5 lic. It also has our application we run. A user logs into > server one and sees a menu. The 3rd selection is what I stated. > The application is on Server02 with TS and 5 lic. When the user > selects server 2, they are kicked out saying Terminal Services > Permissions error. Is this clearer? > > Even one at a time. > > "Vera Noest [MVP]" wrote: > >> An SBS2003 server cannot run Terminal Services. >> It can only be configured for Remote Desktop for >> Administration, which means you have 2 connections, for >> Administrators only. >> >> If this doesn't answer your question, I suggest that you post >> to the sbs newsgroup. They can probably help you much better. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on >> 24 jan 2008 in microsoft.public.windows.terminal_services: >> >> > Server01 is exchange 2003, Server 02 is Application Server >> > with SBS 2003 and Terminal Services,. >> > >> > Statement: Administrators log in via remote to remote wb >> > workplace sign in and go to server01,02 or clients. The >> > application we use is on Server02. >> > >> > Users/remote users, login to renote web wokplace, they see a >> > different menu. # 3 is connect o my companies application and >> > file sharing server. Click go, they see Server02,. they click >> > and it asks for a login. >> > >> > Problem at this point the users, (not admin.) get bounced for >> > Terminal Services permissions. >> > >> > I feel i have done everything correct. thru locla policies >> > etc. >> > >> > What more should I look at. It has been hell. >> > >> > Thanks in advance. All of thier mail and everything else >> > works fine. i juts want them (non-admin) to be able to login >> > to the application Server via remote work place. yes they >> > have been made part od each group. >> > >> > Mark
Guest TP Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 Hi Mark, Please post the *exact* error message that a normal user receives when they attempt to logon to your TS using RWW. Did you make the users a member of the TS server's *local* Remote Desktop Users group? You can do this by logging on to the TS as an admin, opening up Computer Management, and adding the required domain group(s) to the Remote Desktop Users group membership list. For example, you could add the Domain Users group to the list or perhaps the Remote Web Workplace Users group to the list. Thanks. -TP Mark wrote: > Server01 is exchange 2003, Server 02 is Application Server with SBS > 2003 and Terminal Services,. > > Statement: Administrators log in via remote to remote wb workplace > sign in and go to server01,02 or clients. The application we use is > on Server02. > > Users/remote users, login to renote web wokplace, they see a > different menu. # 3 is connect o my companies application and file > sharing server. Click go, they see Server02,. they click and it asks > for a login. > > Problem at this point the users, (not admin.) get bounced for Terminal > Services permissions. > > I feel i have done everything correct. thru locla policies etc. > > What more should I look at. It has been hell. > > Thanks in advance. All of thier mail and everything else works fine. > i juts want them (non-admin) to be able to login to the application > Server via remote work place. yes they have been made part od each > group. > > Mark
Guest Mark Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 I apologize Vera.. I have posted there and am getting some replies and help. We out here do not always speak your language. Some of us are even less bright than otheres. I do my best. I thank all of you MVP's for your effort in trying to help. My questions are being answered. Sometimes you guys ask more difficult questions iin return, than the ones we ask for help with in the beginning. It would help to break some things down dometimes and not be too MVP on us.. It's a service MS provides for us that are learning. We try very hard to understand... Anyway, I am on that board now, and getting help. You have helped me numerous times, AND I AM GRATEFuL TO SAY THE LEAST. "Vera Noest [MVP]" wrote: > Hardly. I suggest again that you post to the sbs newsgroup. > > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > *----------- Please reply in newsgroup -------------* > > =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25 > jan 2008: > > > I said it wrong.. > > > > SBS has exchange server 2003 on it. The second server has TS. > > with 5 lic. It also has our application we run. A user logs into > > server one and sees a menu. The 3rd selection is what I stated. > > The application is on Server02 with TS and 5 lic. When the user > > selects server 2, they are kicked out saying Terminal Services > > Permissions error. Is this clearer? > > > > Even one at a time. > > > > "Vera Noest [MVP]" wrote: > > > >> An SBS2003 server cannot run Terminal Services. > >> It can only be configured for Remote Desktop for > >> Administration, which means you have 2 connections, for > >> Administrators only. > >> > >> If this doesn't answer your question, I suggest that you post > >> to the sbs newsgroup. They can probably help you much better. > >> > >> _________________________________________________________ > >> Vera Noest > >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> TS troubleshooting: http://ts.veranoest.net > >> ___ please respond in newsgroup, NOT by private email ___ > >> > >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on > >> 24 jan 2008 in microsoft.public.windows.terminal_services: > >> > >> > Server01 is exchange 2003, Server 02 is Application Server > >> > with SBS 2003 and Terminal Services,. > >> > > >> > Statement: Administrators log in via remote to remote wb > >> > workplace sign in and go to server01,02 or clients. The > >> > application we use is on Server02. > >> > > >> > Users/remote users, login to renote web wokplace, they see a > >> > different menu. # 3 is connect o my companies application and > >> > file sharing server. Click go, they see Server02,. they click > >> > and it asks for a login. > >> > > >> > Problem at this point the users, (not admin.) get bounced for > >> > Terminal Services permissions. > >> > > >> > I feel i have done everything correct. thru locla policies > >> > etc. > >> > > >> > What more should I look at. It has been hell. > >> > > >> > Thanks in advance. All of thier mail and everything else > >> > works fine. i juts want them (non-admin) to be able to login > >> > to the application Server via remote work place. yes they > >> > have been made part od each group. > >> > > >> > Mark >
Guest Mark Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 Now THAT is some help.......I'm looking to see., how power users and users are defined. I will then addd them to the RWW group.. Thank you....... The error was (on login) you must have TS permissions) "TP" wrote: > Hi Mark, > > Please post the *exact* error message that a normal > user receives when they attempt to logon to your TS > using RWW. Did you make the users a member of > the TS server's *local* Remote Desktop Users group? > > You can do this by logging on to the TS as an admin, > opening up Computer Management, and adding the > required domain group(s) to the Remote Desktop Users > group membership list. For example, you could add > the Domain Users group to the list or perhaps the > Remote Web Workplace Users group to the list. > > Thanks. > > -TP > > Mark wrote: > > Server01 is exchange 2003, Server 02 is Application Server with SBS > > 2003 and Terminal Services,. > > > > Statement: Administrators log in via remote to remote wb workplace > > sign in and go to server01,02 or clients. The application we use is > > on Server02. > > > > Users/remote users, login to renote web wokplace, they see a > > different menu. # 3 is connect o my companies application and file > > sharing server. Click go, they see Server02,. they click and it asks > > for a login. > > > > Problem at this point the users, (not admin.) get bounced for Terminal > > Services permissions. > > > > I feel i have done everything correct. thru locla policies etc. > > > > What more should I look at. It has been hell. > > > > Thanks in advance. All of thier mail and everything else works fine. > > i juts want them (non-admin) to be able to login to the application > > Server via remote work place. yes they have been made part od each > > group. > > > > Mark >
Guest TP Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 Hi Mark, That does not sound like the *exact* error message. Please post the exact error text as it appears on the screen. There are multiple error messages relating to permissions. You should *not* make users a member of the power users group--this is a security problem because members of power users have too much rights and can become administrators. Having users with too much rights will likely lead to system/application instability and/or compromised security. Thanks. -TP Mark wrote: > Now THAT is some help.......I'm looking to see., how power users and > users are defined. I will then addd them to the RWW group.. Thank > you....... > > The error was (on login) you must have TS permissions) >
Guest Mark Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 I'm not getting the message since I added individual users to permissions under TS config. I am curious: you said: and adding the > required domain group(s) to the Remote Desktop Users > group membership list. and gave a how!.. It wasn't that easy. I could not find the area to add RDU group list. I would like to put the users in that group. Then give that group permission... The exact error message, was somethin like you must have Terminal Server Permissions in or to access this server. Pleas add etc. Sorry "TP" wrote: > Hi Mark, > > Please post the *exact* error message that a normal > user receives when they attempt to logon to your TS > using RWW. Did you make the users a member of > the TS server's *local* Remote Desktop Users group? > > You can do this by logging on to the TS as an admin, > opening up Computer Management, and adding the > required domain group(s) to the Remote Desktop Users > group membership list. For example, you could add > the Domain Users group to the list or perhaps the > Remote Web Workplace Users group to the list. > > Thanks. > > -TP > > Mark wrote: > > Server01 is exchange 2003, Server 02 is Application Server with SBS > > 2003 and Terminal Services,. > > > > Statement: Administrators log in via remote to remote wb workplace > > sign in and go to server01,02 or clients. The application we use is > > on Server02. > > > > Users/remote users, login to renote web wokplace, they see a > > different menu. # 3 is connect o my companies application and file > > sharing server. Click go, they see Server02,. they click and it asks > > for a login. > > > > Problem at this point the users, (not admin.) get bounced for Terminal > > Services permissions. > > > > I feel i have done everything correct. thru locla policies etc. > > > > What more should I look at. It has been hell. > > > > Thanks in advance. All of thier mail and everything else works fine. > > i juts want them (non-admin) to be able to login to the application > > Server via remote work place. yes they have been made part od each > > group. > > > > Mark >
Guest TP Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 Hi Mark, Logon to the TS as an admin Start - Programs - Administrative Tools - Computer Management Expand Local Users and Groups on the Left side Click the Groups folder on the Left Double-click Remote Desktop Users on the Right Click the Add button Enter the group(s) you want to add and click the OK button Click the OK button to save your membership changes The above will add the group(s) to the local Remote Desktop Users group, which you will notice in Terminal Services Configuration already has been granted permissions on the RDP-Tcp object. Thanks. -TP Mark wrote: > I'm not getting the message since I added individual users to > permissions under TS config. > > I am curious: you said: and adding the >> required domain group(s) to the Remote Desktop Users >> group membership list. and gave a how!.. It wasn't that easy. I >> could not find the area to add RDU group list. I would like to put >> the users in that group. Then give that group permission... > > The exact error message, was somethin like you must have Terminal > Server Permissions in or to access this server. Pleas add etc. Sorry
Guest Mark Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 perfect..can I add users to that group as a whole. Like jhn doe john doe 2 jd 3 or do I just assign then remote desktop user in thier profile? I'm done.. Thanks "TP" wrote: > Hi Mark, > > Logon to the TS as an admin > Start - Programs - Administrative Tools - Computer Management > Expand Local Users and Groups on the Left side > Click the Groups folder on the Left > Double-click Remote Desktop Users on the Right > Click the Add button > Enter the group(s) you want to add and click the OK button > Click the OK button to save your membership changes > > The above will add the group(s) to the local Remote Desktop Users > group, which you will notice in Terminal Services Configuration > already has been granted permissions on the RDP-Tcp object. > > Thanks. > > -TP > > Mark wrote: > > I'm not getting the message since I added individual users to > > permissions under TS config. > > > > I am curious: you said: and adding the > >> required domain group(s) to the Remote Desktop Users > >> group membership list. and gave a how!.. It wasn't that easy. I > >> could not find the area to add RDU group list. I would like to put > >> the users in that group. Then give that group permission... > > > > The exact error message, was somethin like you must have Terminal > > Server Permissions in or to access this server. Pleas add etc. Sorry >
Guest Vera Noest [MVP] Posted January 25, 2008 Posted January 25, 2008 Re: Server01 and Server02 No need to apologize, Mark. The SBS terminology and technology is in some aspects very specific for SBS (the whole workplace part), so the sbs newsgroup is definitively where you'll want to be. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25 jan 2008 in microsoft.public.windows.terminal_services: > I apologize Vera.. I have posted there and am getting some > replies and help. We out here do not always speak your language. > Some of us are even less bright than otheres. I do my best. > > I thank all of you MVP's for your effort in trying to help. My > questions are being answered. > > Sometimes you guys ask more difficult questions iin return, than > the ones we ask for help with in the beginning. > > It would help to break some things down dometimes and not be too > MVP on us.. It's a service MS provides for us that are learning. > We try very hard to understand... > > Anyway, I am on that board now, and getting help. You have > helped me numerous times, AND I AM GRATEFuL TO SAY THE LEAST. > > "Vera Noest [MVP]" wrote: > >> Hardly. I suggest again that you post to the sbs newsgroup. >> >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> *----------- Please reply in newsgroup -------------* >> >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on >> 25 jan 2008: >> >> > I said it wrong.. >> > >> > SBS has exchange server 2003 on it. The second server has >> > TS. with 5 lic. It also has our application we run. A user >> > logs into server one and sees a menu. The 3rd selection is >> > what I stated. The application is on Server02 with TS and 5 >> > lic. When the user selects server 2, they are kicked out >> > saying Terminal Services Permissions error. Is this clearer? >> > >> > Even one at a time. >> > >> > "Vera Noest [MVP]" wrote: >> > >> >> An SBS2003 server cannot run Terminal Services. >> >> It can only be configured for Remote Desktop for >> >> Administration, which means you have 2 connections, for >> >> Administrators only. >> >> >> >> If this doesn't answer your question, I suggest that you >> >> post to the sbs newsgroup. They can probably help you much >> >> better. >> >> >> >> _________________________________________________________ >> >> Vera Noest >> >> MCSE, CCEA, Microsoft MVP - Terminal Server >> >> TS troubleshooting: http://ts.veranoest.net >> >> ___ please respond in newsgroup, NOT by private email ___ >> >> >> >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote >> >> on 24 jan 2008 in >> >> microsoft.public.windows.terminal_services: >> >> >> >> > Server01 is exchange 2003, Server 02 is Application Server >> >> > with SBS 2003 and Terminal Services,. >> >> > >> >> > Statement: Administrators log in via remote to remote wb >> >> > workplace sign in and go to server01,02 or clients. The >> >> > application we use is on Server02. >> >> > >> >> > Users/remote users, login to renote web wokplace, they see >> >> > a different menu. # 3 is connect o my companies >> >> > application and file sharing server. Click go, they see >> >> > Server02,. they click and it asks for a login. >> >> > >> >> > Problem at this point the users, (not admin.) get bounced >> >> > for Terminal Services permissions. >> >> > >> >> > I feel i have done everything correct. thru locla policies >> >> > etc. >> >> > >> >> > What more should I look at. It has been hell. >> >> > >> >> > Thanks in advance. All of thier mail and everything else >> >> > works fine. i juts want them (non-admin) to be able to >> >> > login to the application Server via remote work place. yes >> >> > they have been made part od each group. >> >> > >> >> > Mark
Recommended Posts