TS logon

[Semir Hadzic]

Hi evererybody,

I have unusal problem with Terminal servers.
It is a new clean instalation. There is four W2003R2 servers from wich
one is DC, SQL and TS License server and other three servers are
Terminal servers in app mode.All four server are in domain managed by DC on
first server.
Problem is this: Domain Remote desktop Users group can't
logon to TS, the same problem is with administrator. In RDP-tcp
configuration there is
only local Remote desktop users group. I can't put in permisions of RDP-tcp
Domain Remote desktop users.
I baypased that all by creating new group called RDP USER and added new
group in RDP-tcp permisions.
Also changed Domain security policy to allow log on trough terminal
services. But that is only hot-fix.
All three servers can see domain and DC. The group policy is distributed
normal. DNS server (on DC)
working normal. Licences are distributed normal, all works.... All four
servers are new instalation.

any suggestions?
please help, thanx

Semir
MCSA

 

[Vera Noest [MVP]]

Re: TS logon

Seems that your RDP permissions are corrupted.
In Terminal Services Configuration - rdp-tcp connection -
permissions - Advanced - click on "Default" button and save.

This should restore the default permissions, which give access to
Administrators and the *local* Remote Desktop Users group.
If you have made your users member of the *domain* Remote Desktop
Users group, add this group to each local RDU group to give them
access.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in
microsoft.public.windows.terminal_services:

> Hi evererybody,
>
> I have unusal problem with Terminal servers.
> It is a new clean instalation. There is four W2003R2 servers
> from wich
> one is DC, SQL and TS License server and other three servers
> are
> Terminal servers in app mode.All four server are in domain
> managed by DC on first server.
> Problem is this: Domain Remote desktop Users group can't
> logon to TS, the same problem is with administrator. In RDP-tcp
> configuration there is
> only local Remote desktop users group. I can't put in permisions
> of RDP-tcp Domain Remote desktop users.
> I baypased that all by creating new group called RDP USER and
> added new group in RDP-tcp permisions.
> Also changed Domain security policy to allow log on trough
> terminal services. But that is only hot-fix.
> All three servers can see domain and DC. The group policy is
> distributed normal. DNS server (on DC)
> working normal. Licences are distributed normal, all works....
> All four servers are new instalation.
>
> any suggestions?
> please help, thanx
>
> Semir
> MCSA

 

[Semir Hadzic]

Re: TS logon

Vera,
thanx for your reply.

I've tried that, I can't add "doman" remote desktop users group to "local"
Remote desktop users group, it does not permmit me to doo that.
That is problem, it permmit me to add domain users and permmit me to add new
created domain groum (RDP USERS) witch I created before(or other groups)
Could it be problem becaouse servers are R2? Something with global
catalogue? I forgot to mentioned in post before all server are SP2 and all
are up do date.

Semir

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...
> Seems that your RDP permissions are corrupted.
> In Terminal Services Configuration - rdp-tcp connection -
> permissions - Advanced - click on "Default" button and save.
>
> This should restore the default permissions, which give access to
> Administrators and the *local* Remote Desktop Users group.
> If you have made your users member of the *domain* Remote Desktop
> Users group, add this group to each local RDU group to give them
> access.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in
> microsoft.public.windows.terminal_services:
>
>> Hi evererybody,
>>
>> I have unusal problem with Terminal servers.
>> It is a new clean instalation. There is four W2003R2 servers
>> from wich
>> one is DC, SQL and TS License server and other three servers
>> are
>> Terminal servers in app mode.All four server are in domain
>> managed by DC on first server.
>> Problem is this: Domain Remote desktop Users group can't
>> logon to TS, the same problem is with administrator. In RDP-tcp
>> configuration there is
>> only local Remote desktop users group. I can't put in permisions
>> of RDP-tcp Domain Remote desktop users.
>> I baypased that all by creating new group called RDP USER and
>> added new group in RDP-tcp permisions.
>> Also changed Domain security policy to allow log on trough
>> terminal services. But that is only hot-fix.
>> All three servers can see domain and DC. The group policy is
>> distributed normal. DNS server (on DC)
>> working normal. Licences are distributed normal, all works....
>> All four servers are new instalation.
>>
>> any suggestions?
>> please help, thanx
>>
>> Semir
>> MCSA

 

[Vera Noest [MVP]]

Re: TS logon

Do you get an error message when you try to add the group?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Semir Hadzic" <semir@gradpula.com> wrote on 27 sep 2007 in
microsoft.public.windows.terminal_services:

> Vera,
> thanx for your reply.
>
> I've tried that, I can't add "doman" remote desktop users group
> to "local" Remote desktop users group, it does not permmit me to
> doo that. That is problem, it permmit me to add domain users and
> permmit me to add new created domain groum (RDP USERS) witch I
> created before(or other groups) Could it be problem becaouse
> servers are R2? Something with global catalogue? I forgot to
> mentioned in post before all server are SP2 and all are up do
> date.
>
> Semir
>
> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
> in message
> news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...
>> Seems that your RDP permissions are corrupted.
>> In Terminal Services Configuration - rdp-tcp connection -
>> permissions - Advanced - click on "Default" button and save.
>>
>> This should restore the default permissions, which give access
>> to Administrators and the *local* Remote Desktop Users group.
>> If you have made your users member of the *domain* Remote
>> Desktop Users group, add this group to each local RDU group to
>> give them access.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in
>> microsoft.public.windows.terminal_services:
>>
>>> Hi evererybody,
>>>
>>> I have unusal problem with Terminal servers.
>>> It is a new clean instalation. There is four W2003R2 servers
>>> from wich
>>> one is DC, SQL and TS License server and other three servers
>>> are
>>> Terminal servers in app mode.All four server are in domain
>>> managed by DC on first server.
>>> Problem is this: Domain Remote desktop Users group can't
>>> logon to TS, the same problem is with administrator. In
>>> RDP-tcp configuration there is
>>> only local Remote desktop users group. I can't put in
>>> permisions of RDP-tcp Domain Remote desktop users.
>>> I baypased that all by creating new group called RDP USER and
>>> added new group in RDP-tcp permisions.
>>> Also changed Domain security policy to allow log on trough
>>> terminal services. But that is only hot-fix.
>>> All three servers can see domain and DC. The group policy is
>>> distributed normal. DNS server (on DC)
>>> working normal. Licences are distributed normal, all works....
>>> All four servers are new instalation.
>>>
>>> any suggestions?
>>> please help, thanx
>>>
>>> Semir
>>> MCSA

 

[Semir Hadzic]

Re: TS logon

If I try to put it manualy by typing it ask me to correct information (like
it was not found in AD), if I tray to put it by browsing users,group or
built in security principals it is not listed there. Firs similar group that
I have seen is TERMINAL SERVER USERS. I have tried to put that Users-Group
but no change.
But when I see on my other servers on other locations it is normal behavior.
There everything work normal. There also you can't put domain rdu group to
security properties op RDP-tcp connections.
I am lost.



"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns99B8DC674603Bveranoesthemutforsse@207.46.248.16...
> Do you get an error message when you try to add the group?
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "Semir Hadzic" <semir@gradpula.com> wrote on 27 sep 2007 in
> microsoft.public.windows.terminal_services:
>
>> Vera,
>> thanx for your reply.
>>
>> I've tried that, I can't add "doman" remote desktop users group
>> to "local" Remote desktop users group, it does not permmit me to
>> doo that. That is problem, it permmit me to add domain users and
>> permmit me to add new created domain groum (RDP USERS) witch I
>> created before(or other groups) Could it be problem becaouse
>> servers are R2? Something with global catalogue? I forgot to
>> mentioned in post before all server are SP2 and all are up do
>> date.
>>
>> Semir
>>
>> "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
>> in message
>> news:Xns99B7EB11C748Everanoesthemutforsse@207.46.248.16...
>>> Seems that your RDP permissions are corrupted.
>>> In Terminal Services Configuration - rdp-tcp connection -
>>> permissions - Advanced - click on "Default" button and save.
>>>
>>> This should restore the default permissions, which give access
>>> to Administrators and the *local* Remote Desktop Users group.
>>> If you have made your users member of the *domain* Remote
>>> Desktop Users group, add this group to each local RDU group to
>>> give them access.
>>>
>>> _________________________________________________________
>>> Vera Noest
>>> MCSE, CCEA, Microsoft MVP - Terminal Server
>>> TS troubleshooting: http://ts.veranoest.net
>>> ___ please respond in newsgroup, NOT by private email ___
>>>
>>> "Semir Hadzic" <semir@gradpula.com> wrote on 26 sep 2007 in
>>> microsoft.public.windows.terminal_services:
>>>
>>>> Hi evererybody,
>>>>
>>>> I have unusal problem with Terminal servers.
>>>> It is a new clean instalation. There is four W2003R2 servers
>>>> from wich
>>>> one is DC, SQL and TS License server and other three servers
>>>> are
>>>> Terminal servers in app mode.All four server are in domain
>>>> managed by DC on first server.
>>>> Problem is this: Domain Remote desktop Users group can't
>>>> logon to TS, the same problem is with administrator. In
>>>> RDP-tcp configuration there is
>>>> only local Remote desktop users group. I can't put in
>>>> permisions of RDP-tcp Domain Remote desktop users.
>>>> I baypased that all by creating new group called RDP USER and
>>>> added new group in RDP-tcp permisions.
>>>> Also changed Domain security policy to allow log on trough
>>>> terminal services. But that is only hot-fix.
>>>> All three servers can see domain and DC. The group policy is
>>>> distributed normal. DNS server (on DC)
>>>> working normal. Licences are distributed normal, all works....
>>>> All four servers are new instalation.
>>>>
>>>> any suggestions?
>>>> please help, thanx
>>>>
>>>> Semir
>>>> MCSA