user is denied access to ts even if his dc group is granted permis

[Guest Oren R.]

1 DC server. 2 TS servers joined to domain.

 

on both TS a domain group was granted access. (using terminal services

configuration > rdp-tcp > permissions).

 

after adding the group, all users joined to the group can access both TS.

 

after severl hours (sometimes a day or two) users are denied access to the TS.

when checking the configuration, i can see the group in the permissions tab.

if i remove the group, apply, add the group again and apply, users can

access again to the TS.

 

appreciate your help on solving this problem.

 

Thanks,

[Guest Vera Noest [MVP]]

Re: user is denied access to ts even if his dc group is granted permis

 

Could be that the ACLs have become corrupted, I've seen some

similar posts.

 

There's a better way to achieve what you want:

make the domain group a member of the local built-in Remote Desktop

Users group on the TS.

This built-in group has by default permission to logon to the TS.

Then reset the rdp-tcp permissions to the default settings (click

on "Advanced" and then "Default").

You might have to reboot the server for this to take effect.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

=?Utf-8?B?T3JlbiBSLg==?= <OrenR@discussions.microsoft.com> wrote

on 01 apr 2008:

> 1 DC server. 2 TS servers joined to domain.

>

> on both TS a domain group was granted access. (using terminal

> services configuration > rdp-tcp > permissions).

>

> after adding the group, all users joined to the group can access

> both TS.

>

> after severl hours (sometimes a day or two) users are denied

> access to the TS. when checking the configuration, i can see the

> group in the permissions tab. if i remove the group, apply, add

> the group again and apply, users can access again to the TS.

>

> appreciate your help on solving this problem.

>

> Thanks,

[Guest Oren R.]

Re: user is denied access to ts even if his dc group is granted pe

 

Re: user is denied access to ts even if his dc group is granted pe

 

thanks for your help.

just made the changes, and will see if it'll solve this problem.

 

Oren

 

"Vera Noest [MVP]" wrote:

> Could be that the ACLs have become corrupted, I've seen some

> similar posts.

>

> There's a better way to achieve what you want:

> make the domain group a member of the local built-in Remote Desktop

> Users group on the TS.

> This built-in group has by default permission to logon to the TS.

> Then reset the rdp-tcp permissions to the default settings (click

> on "Advanced" and then "Default").

> You might have to reboot the server for this to take effect.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> *----------- Please reply in newsgroup -------------*

>

> =?Utf-8?B?T3JlbiBSLg==?= <OrenR@discussions.microsoft.com> wrote

> on 01 apr 2008:

>

> > 1 DC server. 2 TS servers joined to domain.

> >

> > on both TS a domain group was granted access. (using terminal

> > services configuration > rdp-tcp > permissions).

> >

> > after adding the group, all users joined to the group can access

> > both TS.

> >

> > after severl hours (sometimes a day or two) users are denied

> > access to the TS. when checking the configuration, i can see the

> > group in the permissions tab. if i remove the group, apply, add

> > the group again and apply, users can access again to the TS.

> >

> > appreciate your help on solving this problem.

> >

> > Thanks,

>