Connecting to a domain controller

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Tomas Andersson - 28 Feb 2004 12:36 GMT

Hi,

I'm having problems connecting to a terminal server (Windows Server 2003)
without the user being a member of Administrators. Terminal Services
Licensing is installed and seems to work just fine. Users cannot connect if
they are only members of the Remote Desktop Users group. I've tried to add
the user to several different groups but the only time it works is when the
user is an administrator. This is a DC and it's the only server on the
network, since it is a small office network. Does anyone have a clue about
what I'm doing wrong here?

Regards,

Tomas Andersson

Reply to this Message

Olof Lagerkvist - 28 Feb 2004 18:57 GMT

> I'm having problems connecting to a terminal server (Windows Server 2003)
> without the user being a member of Administrators. Terminal Services
> Licensing is installed and seems to work just fine. Users cannot connect if
> they are only members of the Remote Desktop Users group. I've tried to add
> the user to several different groups but the only time it works is when the
> user is an administrator. This is a DC and it's the only server on the

I think you have the problem here. Other users than administrators
cannot normally log on to a DC interactively.

> network, since it is a small office network. Does anyone have a clue about
> what I'm doing wrong here?

To allow Domain Users group to log on, open Control Panel ->
Administrative Tools -> Default Domain Controller Security Settings ->
Local Policies -> User Rights Assignment. To the "Allow log on locally"
setting, add the group "Domain Users".

Signature

Olof Lagerkvist
ICQ: 724451
Web page: http://here.is/olof

Reply to this Message

Tomas Andersson - 29 Feb 2004 22:09 GMT

Hi,

Unfortunately, it seems like it doesn't matter what groups or users I add to
"Log on locally", they can still not log on. The only way it seems is to
have the specific application that the users are supposed to run setup to
run automatically, since I don't believe that any of the users in question
would know what rights they have, even if the are administrators ;-)

I will inform the company though, that if they want to increase security,
they would need to setup a specific server for terminal services.

Tomas

> > I'm having problems connecting to a terminal server (Windows Server 2003)
> > without the user being a member of Administrators. Terminal Services
[quoted text clipped - 13 lines]
> Local Policies -> User Rights Assignment. To the "Allow log on locally"
> setting, add the group "Domain Users".

Reply to this Message