Server01 and Server02

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

Guest
Server01 is exchange 2003, Server 02 is Application Server with SBS 2003 and
Terminal Services,.

Statement: Administrators log in via remote to remote wb workplace sign in
and go to server01,02 or clients. The application we use is on Server02.

Users/remote users, login to renote web wokplace, they see a different menu.
# 3 is connect o my companies application and file sharing server. Click go,
they see Server02,. they click and it asks for a login.

Problem at this point the users, (not admin.) get bounced for Terminal
Services permissions.

I feel i have done everything correct. thru locla policies etc.

What more should I look at. It has been hell.

Thanks in advance. All of thier mail and everything else works fine. i juts
want them (non-admin) to be able to login to the application Server via
remote work place. yes they have been made part od each group.

Mark
 
RE: Server01 and Server02

I may have that backwords on which server is which.. The problem still
exists. Users can't log onto Server 2 from remote web workplace.

"Mark" wrote:

> Server01 is exchange 2003, Server 02 is Application Server with SBS 2003 and
> Terminal Services,.
>
> Statement: Administrators log in via remote to remote wb workplace sign in
> and go to server01,02 or clients. The application we use is on Server02.
>
> Users/remote users, login to renote web wokplace, they see a different menu.
> # 3 is connect o my companies application and file sharing server. Click go,
> they see Server02,. they click and it asks for a login.
>
> Problem at this point the users, (not admin.) get bounced for Terminal
> Services permissions.
>
> I feel i have done everything correct. thru locla policies etc.
>
> What more should I look at. It has been hell.
>
> Thanks in advance. All of thier mail and everything else works fine. i juts
> want them (non-admin) to be able to login to the application Server via
> remote work place. yes they have been made part od each group.
>
> Mark
 
Re: Server01 and Server02

An SBS2003 server cannot run Terminal Services.
It can only be configured for Remote Desktop for Administration,
which means you have 2 connections, for Administrators only.

If this doesn't answer your question, I suggest that you post to
the sbs newsgroup. They can probably help you much better.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 24
jan 2008 in microsoft.public.windows.terminal_services:

> Server01 is exchange 2003, Server 02 is Application Server with
> SBS 2003 and Terminal Services,.
>
> Statement: Administrators log in via remote to remote wb
> workplace sign in and go to server01,02 or clients. The
> application we use is on Server02.
>
> Users/remote users, login to renote web wokplace, they see a
> different menu. # 3 is connect o my companies application and
> file sharing server. Click go, they see Server02,. they click
> and it asks for a login.
>
> Problem at this point the users, (not admin.) get bounced for
> Terminal Services permissions.
>
> I feel i have done everything correct. thru locla policies etc.
>
> What more should I look at. It has been hell.
>
> Thanks in advance. All of thier mail and everything else works
> fine. i juts want them (non-admin) to be able to login to the
> application Server via remote work place. yes they have been
> made part od each group.
>
> Mark
 
Re: Server01 and Server02

I said it wrong..

SBS has exchange server 2003 on it. The second server has TS. with 5 lic.
It also has our application we run. A user logs into server one and sees a
menu. The 3rd selection is what I stated. The application is on Server02 with
TS and 5 lic. When the user selects server 2, they are kicked out saying
Terminal Services Permissions error. Is this clearer?

Even one at a time.

"Vera Noest [MVP]" wrote:

> An SBS2003 server cannot run Terminal Services.
> It can only be configured for Remote Desktop for Administration,
> which means you have 2 connections, for Administrators only.
>
> If this doesn't answer your question, I suggest that you post to
> the sbs newsgroup. They can probably help you much better.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 24
> jan 2008 in microsoft.public.windows.terminal_services:
>
> > Server01 is exchange 2003, Server 02 is Application Server with
> > SBS 2003 and Terminal Services,.
> >
> > Statement: Administrators log in via remote to remote wb
> > workplace sign in and go to server01,02 or clients. The
> > application we use is on Server02.
> >
> > Users/remote users, login to renote web wokplace, they see a
> > different menu. # 3 is connect o my companies application and
> > file sharing server. Click go, they see Server02,. they click
> > and it asks for a login.
> >
> > Problem at this point the users, (not admin.) get bounced for
> > Terminal Services permissions.
> >
> > I feel i have done everything correct. thru locla policies etc.
> >
> > What more should I look at. It has been hell.
> >
> > Thanks in advance. All of thier mail and everything else works
> > fine. i juts want them (non-admin) to be able to login to the
> > application Server via remote work place. yes they have been
> > made part od each group.
> >
> > Mark
>
 
Re: Server01 and Server02

Hardly. I suggest again that you post to the sbs newsgroup.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25
jan 2008:

> I said it wrong..
>
> SBS has exchange server 2003 on it. The second server has TS.
> with 5 lic. It also has our application we run. A user logs into
> server one and sees a menu. The 3rd selection is what I stated.
> The application is on Server02 with TS and 5 lic. When the user
> selects server 2, they are kicked out saying Terminal Services
> Permissions error. Is this clearer?
>
> Even one at a time.
>
> "Vera Noest [MVP]" wrote:
>
>> An SBS2003 server cannot run Terminal Services.
>> It can only be configured for Remote Desktop for
>> Administration, which means you have 2 connections, for
>> Administrators only.
>>
>> If this doesn't answer your question, I suggest that you post
>> to the sbs newsgroup. They can probably help you much better.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on
>> 24 jan 2008 in microsoft.public.windows.terminal_services:
>>
>> > Server01 is exchange 2003, Server 02 is Application Server
>> > with SBS 2003 and Terminal Services,.
>> >
>> > Statement: Administrators log in via remote to remote wb
>> > workplace sign in and go to server01,02 or clients. The
>> > application we use is on Server02.
>> >
>> > Users/remote users, login to renote web wokplace, they see a
>> > different menu. # 3 is connect o my companies application and
>> > file sharing server. Click go, they see Server02,. they click
>> > and it asks for a login.
>> >
>> > Problem at this point the users, (not admin.) get bounced for
>> > Terminal Services permissions.
>> >
>> > I feel i have done everything correct. thru locla policies
>> > etc.
>> >
>> > What more should I look at. It has been hell.
>> >
>> > Thanks in advance. All of thier mail and everything else
>> > works fine. i juts want them (non-admin) to be able to login
>> > to the application Server via remote work place. yes they
>> > have been made part od each group.
>> >
>> > Mark
 
Re: Server01 and Server02

Hi Mark,

Please post the *exact* error message that a normal
user receives when they attempt to logon to your TS
using RWW. Did you make the users a member of
the TS server's *local* Remote Desktop Users group?

You can do this by logging on to the TS as an admin,
opening up Computer Management, and adding the
required domain group(s) to the Remote Desktop Users
group membership list. For example, you could add
the Domain Users group to the list or perhaps the
Remote Web Workplace Users group to the list.

Thanks.

-TP

Mark wrote:
> Server01 is exchange 2003, Server 02 is Application Server with SBS
> 2003 and Terminal Services,.
>
> Statement: Administrators log in via remote to remote wb workplace
> sign in and go to server01,02 or clients. The application we use is
> on Server02.
>
> Users/remote users, login to renote web wokplace, they see a
> different menu. # 3 is connect o my companies application and file
> sharing server. Click go, they see Server02,. they click and it asks
> for a login.
>
> Problem at this point the users, (not admin.) get bounced for Terminal
> Services permissions.
>
> I feel i have done everything correct. thru locla policies etc.
>
> What more should I look at. It has been hell.
>
> Thanks in advance. All of thier mail and everything else works fine.
> i juts want them (non-admin) to be able to login to the application
> Server via remote work place. yes they have been made part od each
> group.
>
> Mark
 
Re: Server01 and Server02

I apologize Vera.. I have posted there and am getting some replies and help.
We out here do not always speak your language. Some of us are even less
bright than otheres. I do my best.

I thank all of you MVP's for your effort in trying to help. My questions are
being answered.

Sometimes you guys ask more difficult questions iin return, than the ones we
ask for help with in the beginning.

It would help to break some things down dometimes and not be too MVP on us..
It's a service MS provides for us that are learning. We try very hard to
understand...

Anyway, I am on that board now, and getting help. You have helped me
numerous times, AND I AM GRATEFuL TO SAY THE LEAST.

"Vera Noest [MVP]" wrote:

> Hardly. I suggest again that you post to the sbs newsgroup.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25
> jan 2008:
>
> > I said it wrong..
> >
> > SBS has exchange server 2003 on it. The second server has TS.
> > with 5 lic. It also has our application we run. A user logs into
> > server one and sees a menu. The 3rd selection is what I stated.
> > The application is on Server02 with TS and 5 lic. When the user
> > selects server 2, they are kicked out saying Terminal Services
> > Permissions error. Is this clearer?
> >
> > Even one at a time.
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> An SBS2003 server cannot run Terminal Services.
> >> It can only be configured for Remote Desktop for
> >> Administration, which means you have 2 connections, for
> >> Administrators only.
> >>
> >> If this doesn't answer your question, I suggest that you post
> >> to the sbs newsgroup. They can probably help you much better.
> >>
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on
> >> 24 jan 2008 in microsoft.public.windows.terminal_services:
> >>
> >> > Server01 is exchange 2003, Server 02 is Application Server
> >> > with SBS 2003 and Terminal Services,.
> >> >
> >> > Statement: Administrators log in via remote to remote wb
> >> > workplace sign in and go to server01,02 or clients. The
> >> > application we use is on Server02.
> >> >
> >> > Users/remote users, login to renote web wokplace, they see a
> >> > different menu. # 3 is connect o my companies application and
> >> > file sharing server. Click go, they see Server02,. they click
> >> > and it asks for a login.
> >> >
> >> > Problem at this point the users, (not admin.) get bounced for
> >> > Terminal Services permissions.
> >> >
> >> > I feel i have done everything correct. thru locla policies
> >> > etc.
> >> >
> >> > What more should I look at. It has been hell.
> >> >
> >> > Thanks in advance. All of thier mail and everything else
> >> > works fine. i juts want them (non-admin) to be able to login
> >> > to the application Server via remote work place. yes they
> >> > have been made part od each group.
> >> >
> >> > Mark
>
 
Re: Server01 and Server02

Now THAT is some help.......I'm looking to see., how power users and users
are defined. I will then addd them to the RWW group.. Thank you.......

The error was (on login) you must have TS permissions)

"TP" wrote:

> Hi Mark,
>
> Please post the *exact* error message that a normal
> user receives when they attempt to logon to your TS
> using RWW. Did you make the users a member of
> the TS server's *local* Remote Desktop Users group?
>
> You can do this by logging on to the TS as an admin,
> opening up Computer Management, and adding the
> required domain group(s) to the Remote Desktop Users
> group membership list. For example, you could add
> the Domain Users group to the list or perhaps the
> Remote Web Workplace Users group to the list.
>
> Thanks.
>
> -TP
>
> Mark wrote:
> > Server01 is exchange 2003, Server 02 is Application Server with SBS
> > 2003 and Terminal Services,.
> >
> > Statement: Administrators log in via remote to remote wb workplace
> > sign in and go to server01,02 or clients. The application we use is
> > on Server02.
> >
> > Users/remote users, login to renote web wokplace, they see a
> > different menu. # 3 is connect o my companies application and file
> > sharing server. Click go, they see Server02,. they click and it asks
> > for a login.
> >
> > Problem at this point the users, (not admin.) get bounced for Terminal
> > Services permissions.
> >
> > I feel i have done everything correct. thru locla policies etc.
> >
> > What more should I look at. It has been hell.
> >
> > Thanks in advance. All of thier mail and everything else works fine.
> > i juts want them (non-admin) to be able to login to the application
> > Server via remote work place. yes they have been made part od each
> > group.
> >
> > Mark
>
 
Re: Server01 and Server02

Hi Mark,

That does not sound like the *exact* error message. Please
post the exact error text as it appears on the screen. There
are multiple error messages relating to permissions.

You should *not* make users a member of the power users
group--this is a security problem because members of
power users have too much rights and can become
administrators. Having users with too much rights will likely
lead to system/application instability and/or compromised
security.

Thanks.

-TP

Mark wrote:
> Now THAT is some help.......I'm looking to see., how power users and
> users are defined. I will then addd them to the RWW group.. Thank
> you.......
>
> The error was (on login) you must have TS permissions)
>
 
Re: Server01 and Server02

I'm not getting the message since I added individual users to permissions
under TS config.

I am curious: you said: and adding the
> required domain group(s) to the Remote Desktop Users
> group membership list. and gave a how!.. It wasn't that easy. I could not find the area to add RDU group list. I would like to put the users in that group. Then give that group permission...

The exact error message, was somethin like you must have Terminal Server
Permissions in or to access this server. Pleas add etc. Sorry

"TP" wrote:

> Hi Mark,
>
> Please post the *exact* error message that a normal
> user receives when they attempt to logon to your TS
> using RWW. Did you make the users a member of
> the TS server's *local* Remote Desktop Users group?
>
> You can do this by logging on to the TS as an admin,
> opening up Computer Management, and adding the
> required domain group(s) to the Remote Desktop Users
> group membership list. For example, you could add
> the Domain Users group to the list or perhaps the
> Remote Web Workplace Users group to the list.
>
> Thanks.
>
> -TP
>
> Mark wrote:
> > Server01 is exchange 2003, Server 02 is Application Server with SBS
> > 2003 and Terminal Services,.
> >
> > Statement: Administrators log in via remote to remote wb workplace
> > sign in and go to server01,02 or clients. The application we use is
> > on Server02.
> >
> > Users/remote users, login to renote web wokplace, they see a
> > different menu. # 3 is connect o my companies application and file
> > sharing server. Click go, they see Server02,. they click and it asks
> > for a login.
> >
> > Problem at this point the users, (not admin.) get bounced for Terminal
> > Services permissions.
> >
> > I feel i have done everything correct. thru locla policies etc.
> >
> > What more should I look at. It has been hell.
> >
> > Thanks in advance. All of thier mail and everything else works fine.
> > i juts want them (non-admin) to be able to login to the application
> > Server via remote work place. yes they have been made part od each
> > group.
> >
> > Mark
>
 
Re: Server01 and Server02

Hi Mark,

Logon to the TS as an admin
Start - Programs - Administrative Tools - Computer Management
Expand Local Users and Groups on the Left side
Click the Groups folder on the Left
Double-click Remote Desktop Users on the Right
Click the Add button
Enter the group(s) you want to add and click the OK button
Click the OK button to save your membership changes

The above will add the group(s) to the local Remote Desktop Users
group, which you will notice in Terminal Services Configuration
already has been granted permissions on the RDP-Tcp object.

Thanks.

-TP

Mark wrote:
> I'm not getting the message since I added individual users to
> permissions under TS config.
>
> I am curious: you said: and adding the
>> required domain group(s) to the Remote Desktop Users
>> group membership list. and gave a how!.. It wasn't that easy. I
>> could not find the area to add RDU group list. I would like to put
>> the users in that group. Then give that group permission...
>
> The exact error message, was somethin like you must have Terminal
> Server Permissions in or to access this server. Pleas add etc. Sorry
 
Re: Server01 and Server02

perfect..can I add users to that group as a whole.

Like jhn doe
john doe 2
jd 3

or do I just assign then remote desktop user in thier profile?

I'm done.. Thanks

"TP" wrote:

> Hi Mark,
>
> Logon to the TS as an admin
> Start - Programs - Administrative Tools - Computer Management
> Expand Local Users and Groups on the Left side
> Click the Groups folder on the Left
> Double-click Remote Desktop Users on the Right
> Click the Add button
> Enter the group(s) you want to add and click the OK button
> Click the OK button to save your membership changes
>
> The above will add the group(s) to the local Remote Desktop Users
> group, which you will notice in Terminal Services Configuration
> already has been granted permissions on the RDP-Tcp object.
>
> Thanks.
>
> -TP
>
> Mark wrote:
> > I'm not getting the message since I added individual users to
> > permissions under TS config.
> >
> > I am curious: you said: and adding the
> >> required domain group(s) to the Remote Desktop Users
> >> group membership list. and gave a how!.. It wasn't that easy. I
> >> could not find the area to add RDU group list. I would like to put
> >> the users in that group. Then give that group permission...
> >
> > The exact error message, was somethin like you must have Terminal
> > Server Permissions in or to access this server. Pleas add etc. Sorry
>
 
Re: Server01 and Server02

No need to apologize, Mark.
The SBS terminology and technology is in some aspects very specific
for SBS (the whole workplace part), so the sbs newsgroup is
definitively where you'll want to be.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on 25
jan 2008 in microsoft.public.windows.terminal_services:

> I apologize Vera.. I have posted there and am getting some
> replies and help. We out here do not always speak your language.
> Some of us are even less bright than otheres. I do my best.
>
> I thank all of you MVP's for your effort in trying to help. My
> questions are being answered.
>
> Sometimes you guys ask more difficult questions iin return, than
> the ones we ask for help with in the beginning.
>
> It would help to break some things down dometimes and not be too
> MVP on us.. It's a service MS provides for us that are learning.
> We try very hard to understand...
>
> Anyway, I am on that board now, and getting help. You have
> helped me numerous times, AND I AM GRATEFuL TO SAY THE LEAST.
>
> "Vera Noest [MVP]" wrote:
>
>> Hardly. I suggest again that you post to the sbs newsgroup.
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> *----------- Please reply in newsgroup -------------*
>>
>> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote on
>> 25 jan 2008:
>>
>> > I said it wrong..
>> >
>> > SBS has exchange server 2003 on it. The second server has
>> > TS. with 5 lic. It also has our application we run. A user
>> > logs into server one and sees a menu. The 3rd selection is
>> > what I stated. The application is on Server02 with TS and 5
>> > lic. When the user selects server 2, they are kicked out
>> > saying Terminal Services Permissions error. Is this clearer?
>> >
>> > Even one at a time.
>> >
>> > "Vera Noest [MVP]" wrote:
>> >
>> >> An SBS2003 server cannot run Terminal Services.
>> >> It can only be configured for Remote Desktop for
>> >> Administration, which means you have 2 connections, for
>> >> Administrators only.
>> >>
>> >> If this doesn't answer your question, I suggest that you
>> >> post to the sbs newsgroup. They can probably help you much
>> >> better.
>> >>
>> >> _________________________________________________________
>> >> Vera Noest
>> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> TS troubleshooting: http://ts.veranoest.net
>> >> ___ please respond in newsgroup, NOT by private email ___
>> >>
>> >> =?Utf-8?B?TWFyaw==?= <Mark@discussions.microsoft.com> wrote
>> >> on 24 jan 2008 in
>> >> microsoft.public.windows.terminal_services:
>> >>
>> >> > Server01 is exchange 2003, Server 02 is Application Server
>> >> > with SBS 2003 and Terminal Services,.
>> >> >
>> >> > Statement: Administrators log in via remote to remote wb
>> >> > workplace sign in and go to server01,02 or clients. The
>> >> > application we use is on Server02.
>> >> >
>> >> > Users/remote users, login to renote web wokplace, they see
>> >> > a different menu. # 3 is connect o my companies
>> >> > application and file sharing server. Click go, they see
>> >> > Server02,. they click and it asks for a login.
>> >> >
>> >> > Problem at this point the users, (not admin.) get bounced
>> >> > for Terminal Services permissions.
>> >> >
>> >> > I feel i have done everything correct. thru locla policies
>> >> > etc.
>> >> >
>> >> > What more should I look at. It has been hell.
>> >> >
>> >> > Thanks in advance. All of thier mail and everything else
>> >> > works fine. i juts want them (non-admin) to be able to
>> >> > login to the application Server via remote work place. yes
>> >> > they have been made part od each group.
>> >> >
>> >> > Mark
 
Back
Top