2003 Terminal Server on Active Directory Domain Controller

  • Thread starter Thread starter Dan Gray
  • Start date Start date
D

Dan Gray

Guest
Can a Windows 2003 Terminal Server also be a Domain Controller? I have one
setup, but when you try to login to terminal server is says that "To logon
to this Remote Computer, you must have Terminal Services users access
permission, the user must be a member of the Remote Desktop Users Group".
There is not a Remote Desktop Users Group as this is a Domain Controller,
not a member server, so you cannot get to the local groups. If the user is
in the administrator group, it works, take them out and the previous message
is what you get.

I have 2-2000 Active Domain Controllers and the one 2003 Domain Controller
running Terminal Server and is the licensing server for Terminal Server.

I have tried to use mmc to give a group access that the user is in to
Terminal Server, but no luck. The user is configured to have access to
terminal server in their account configuration.


If I turn the one 2003 Server running Terminal Server into a member server
and remove it as a domain controller, can it also be the licensing server
for Terminal Server 2003/
Any thoughts?
 
Re: 2003 Terminal Server on Active Directory Domain Controller

It's possible, but *not* recommended, for both security and
performance reasons.
Since you already have 2 DCs in the domain, you shouldn't need a
third one. Just make the 2003 server a member server in the domain,
and you'll have a much better environment.
And yes, a Windows 2003 TS Licensing Server can run on a member
server in the domain.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Dan Gray" <dan.gray@dan-gray.com> wrote on 03 feb 2008 in
microsoft.public.windows.terminal_services:

> Can a Windows 2003 Terminal Server also be a Domain Controller?
> I have one setup, but when you try to login to terminal server
> is says that "To logon to this Remote Computer, you must have
> Terminal Services users access permission, the user must be a
> member of the Remote Desktop Users Group". There is not a Remote
> Desktop Users Group as this is a Domain Controller, not a member
> server, so you cannot get to the local groups. If the user is
> in the administrator group, it works, take them out and the
> previous message is what you get.
>
> I have 2-2000 Active Domain Controllers and the one 2003 Domain
> Controller running Terminal Server and is the licensing server
> for Terminal Server.
>
> I have tried to use mmc to give a group access that the user is
> in to Terminal Server, but no luck. The user is configured to
> have access to terminal server in their account configuration.
>
>
> If I turn the one 2003 Server running Terminal Server into a
> member server and remove it as a domain controller, can it also
> be the licensing server for Terminal Server 2003/
> Any thoughts?
 
Back
Top