Remote desktop logon

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Simo - 26 Apr 2006 18:05 GMT

new to terminal services.
I have a win 2000 server with TS installed.
I have win2k with remote desktop installed.
I can access the sever as administrator but when I try and access as a
domain user I get the following error "The local policy of this system does
not allow you to logon interactively".
Any where I can find out a doc to sort this out?
Cheers

Reply to this Message

Vera Noest [MVP] - 26 Apr 2006 20:54 GMT

Since your TS runs on a W2K server, you need to give your users the
user right "Log on locally".
You can grant them this right in the appropriate GPO, under Security
Settings\Local Policies\User Rights Assignment\Log On Locally

246109 - Error Messages Generated When Logging on with Terminal
Services Client
http://support.microsoft.com/?kbid=246109

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?U2ltbw==?= <Simo@discussions.microsoft.com> wrote on 26
apr 2006 in microsoft.public.win2000.termserv.clients:

> new to terminal services.
> I have a win 2000 server with TS installed.
[quoted text clipped - 4 lines]
> interactively". Any where I can find out a doc to sort this out?
> Cheers

Reply to this Message

Simo - 27 Apr 2006 18:10 GMT

Many thanks, I had that set but your doc lead me to another that asked me to
do a change under the domain controller secrurity policy. This allowed me to
go one step forward but then got a msg saying " you do not have access to
logon to this session".???

> Since your TS runs on a W2K server, you need to give your users the
> user right "Log on locally".
[quoted text clipped - 22 lines]
> > interactively". Any where I can find out a doc to sort this out?
> > Cheers

Reply to this Message

Vera Noest [MVP] - 27 Apr 2006 19:38 GMT

It seems that your TS is also a Domain Controller. That's *not*
recommended, for both security and performance reasons!

The error message that you are receiving now is also listed in the
KB article I referenced:

Error message:
You do not have access to this Session.
Description: The user attempting to log on does not have sufficient
permissions on the appropriate RDP-TCP connection. Modify the RDP-
TCP permissions by using Terminal Services Configuration to grant
the user or group the logon permission.

Note that by default only Administrators are allowed to connect to
TS on a Domain Controller. You have to add Domain Users to the
permissions on the rdp-tcp connection and give them User rights (if
you really want to go forward with this setup).

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?U2ltbw==?= <Simo@discussions.microsoft.com> wrote on 27
apr 2006 in microsoft.public.win2000.termserv.clients:

> Many thanks, I had that set but your doc lead me to another that
> asked me to do a change under the domain controller secrurity
[quoted text clipped - 29 lines]
>> > interactively". Any where I can find out a doc to sort this
>> > out? Cheers

Reply to this Message