where to give access to terminal server

  • Thread starter Thread starter Davorin Scharping
  • Start date Start date
D

Davorin Scharping

Guest
Hello,

I am wondering where I have to grant access to terminal services.
I added the user to the group "Remotedesktopbenutzer" which should have the
right to log in on terminal servers.
But the users are not allowed to do that.
Where do I have to grant rights within my domain?
Through "Domain Controller Security Policy" or through "Domain Security
Policy"?

Thanks
Davorin
 
Re: where to give access to terminal server

Your TS is not running on a Domain Controller, is it?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

"Davorin Scharping" <scharping@kellyservices.de> wrote on 28 dec
2007:

> Hello,
>
> I am wondering where I have to grant access to terminal
> services. I added the user to the group "Remotedesktopbenutzer"
> which should have the right to log in on terminal servers.
> But the users are not allowed to do that.
> Where do I have to grant rights within my domain?
> Through "Domain Controller Security Policy" or through "Domain
> Security Policy"?
>
> Thanks
> Davorin
 
Re: where to give access to terminal server

> Your TS is not running on a Domain Controller, is it?
No, it is running on two servers 2003 SP2 which are only part of the domain
but no DC.
 
Re: where to give access to terminal server

Then all you should have to do is to make the users members of the
Remote Desktop Users group, i.e. the *local* group on the TS, not
the domain group in AD.
But if you previously have removed default user rights from your
user accounts or groups they belong to, then you'll have to restore
the default rights again.

Required rights:
Allow log on through Terminal Services
This user right is by default granted to Administrators and members
of the local Remote Desktop Users group on the server.

Permission to use the rdp-tcp connection
The local Remote Desktop Users group has by default "User access"
permission on the rdp-tcp connection.

Allow logon to Terminal Server checkbox, in the properties of the
user account in AD.
By default, this checkbox is checked for all users.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

"Davorin Scharping" <scharping@kellyservices.de> wrote on 28 dec
2007:

>> Your TS is not running on a Domain Controller, is it?
> No, it is running on two servers 2003 SP2 which are only part of
> the domain but no DC.
 
Re: where to give access to terminal server

> Then all you should have to do is to make the users members of the
> Remote Desktop Users group, i.e. the *local* group on the TS, not
> the domain group in AD.
That was the point :-D
I got it working :-D

Thankks a lot.

Happy new year!
 
Back
Top