TS Authentication

[Guest Rick]

I have a single domain running Windows 2003 Small Business Server R2 SP2.

Within the domain I have a Windows 2003 R2 SP2 running Terminal Services.

 

All Users have already authenticated with the DC (SBS) before being allowed

access to the TS.

 

I have 2 questions:

 

1. When the User connects to the TS via RDC s/he is always asked to logon

yet again. This time however the RDC logon prefixes the User Logon ID with

the TS name (i.e. APPserver\Rick). It is a real pain having to delete the

prefix each time. Can this be overridden since there are no local accounts

for Users on the TS server? They authenticate using the DC logon (and get a

'loopback' gpo applied).

 

2. Even better yet, since they have already authenticated with the DC is it

possible to bypass the Logon screens and go directly into a new session on

the TS?

 

Thank you.

 

... rick

[Guest Vera Noest [MVP]]

Re: TS Authentication

 

Sound like your clients are running version 6.0 of the rdp client.

Check this for detailed information about the new behaviour:

 

Vista Remote Desktop Connection Authentication FAQ

http://blogs.msdn.com/ts/archive/2007/01/22/vista-remote-desktop-

connection-authentication-faq.aspx

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Rick" <noway@notme.com> wrote on 28 jan 2008 in

microsoft.public.windows.terminal_services:

> I have a single domain running Windows 2003 Small Business

> Server R2 SP2. Within the domain I have a Windows 2003 R2 SP2

> running Terminal Services.

>

> All Users have already authenticated with the DC (SBS) before

> being allowed access to the TS.

>

> I have 2 questions:

>

> 1. When the User connects to the TS via RDC s/he is always asked

> to logon yet again. This time however the RDC logon prefixes the

> User Logon ID with the TS name (i.e. APPserver\Rick). It is a

> real pain having to delete the prefix each time. Can this be

> overridden since there are no local accounts for Users on the TS

> server? They authenticate using the DC logon (and get a

> 'loopback' gpo applied).

>

> 2. Even better yet, since they have already authenticated with

> the DC is it possible to bypass the Logon screens and go

> directly into a new session on the TS?

>

> Thank you.

>

> .. rick