2003 Terminal Server on Active Directory Domain Controller

[Guest Dan Gray]

Can a Windows 2003 Terminal Server also be a Domain Controller? I have one

setup, but when you try to login to terminal server is says that "To logon

to this Remote Computer, you must have Terminal Services users access

permission, the user must be a member of the Remote Desktop Users Group".

There is not a Remote Desktop Users Group as this is a Domain Controller,

not a member server, so you cannot get to the local groups. If the user is

in the administrator group, it works, take them out and the previous message

is what you get.

 

I have 2-2000 Active Domain Controllers and the one 2003 Domain Controller

running Terminal Server and is the licensing server for Terminal Server.

 

I have tried to use mmc to give a group access that the user is in to

Terminal Server, but no luck. The user is configured to have access to

terminal server in their account configuration.

 

 

If I turn the one 2003 Server running Terminal Server into a member server

and remove it as a domain controller, can it also be the licensing server

for Terminal Server 2003/

Any thoughts?

[Guest Vera Noest [MVP]]

Re: 2003 Terminal Server on Active Directory Domain Controller

 

It's possible, but *not* recommended, for both security and

performance reasons.

Since you already have 2 DCs in the domain, you shouldn't need a

third one. Just make the 2003 server a member server in the domain,

and you'll have a much better environment.

And yes, a Windows 2003 TS Licensing Server can run on a member

server in the domain.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Dan Gray" <dan.gray@dan-gray.com> wrote on 03 feb 2008 in

microsoft.public.windows.terminal_services:

> Can a Windows 2003 Terminal Server also be a Domain Controller?

> I have one setup, but when you try to login to terminal server

> is says that "To logon to this Remote Computer, you must have

> Terminal Services users access permission, the user must be a

> member of the Remote Desktop Users Group". There is not a Remote

> Desktop Users Group as this is a Domain Controller, not a member

> server, so you cannot get to the local groups. If the user is

> in the administrator group, it works, take them out and the

> previous message is what you get.

>

> I have 2-2000 Active Domain Controllers and the one 2003 Domain

> Controller running Terminal Server and is the licensing server

> for Terminal Server.

>

> I have tried to use mmc to give a group access that the user is

> in to Terminal Server, but no luck. The user is configured to

> have access to terminal server in their account configuration.

>

>

> If I turn the one 2003 Server running Terminal Server into a

> member server and remove it as a domain controller, can it also

> be the licensing server for Terminal Server 2003/

> Any thoughts?