user is denied access to ts even if his dc group is granted permis

  • Thread starter Thread starter Oren R.
  • Start date Start date
O

Oren R.

Guest
1 DC server. 2 TS servers joined to domain.

on both TS a domain group was granted access. (using terminal services
configuration > rdp-tcp > permissions).

after adding the group, all users joined to the group can access both TS.

after severl hours (sometimes a day or two) users are denied access to the TS.
when checking the configuration, i can see the group in the permissions tab.
if i remove the group, apply, add the group again and apply, users can
access again to the TS.

appreciate your help on solving this problem.

Thanks,
 
Re: user is denied access to ts even if his dc group is granted permis

Could be that the ACLs have become corrupted, I've seen some
similar posts.

There's a better way to achieve what you want:
make the domain group a member of the local built-in Remote Desktop
Users group on the TS.
This built-in group has by default permission to logon to the TS.
Then reset the rdp-tcp permissions to the default settings (click
on "Advanced" and then "Default").
You might have to reboot the server for this to take effect.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?T3JlbiBSLg==?= <OrenR@discussions.microsoft.com> wrote
on 01 apr 2008:

> 1 DC server. 2 TS servers joined to domain.
>
> on both TS a domain group was granted access. (using terminal
> services configuration > rdp-tcp > permissions).
>
> after adding the group, all users joined to the group can access
> both TS.
>
> after severl hours (sometimes a day or two) users are denied
> access to the TS. when checking the configuration, i can see the
> group in the permissions tab. if i remove the group, apply, add
> the group again and apply, users can access again to the TS.
>
> appreciate your help on solving this problem.
>
> Thanks,
 
Re: user is denied access to ts even if his dc group is granted pe

Re: user is denied access to ts even if his dc group is granted pe

thanks for your help.
just made the changes, and will see if it'll solve this problem.

Oren

"Vera Noest [MVP]" wrote:

> Could be that the ACLs have become corrupted, I've seen some
> similar posts.
>
> There's a better way to achieve what you want:
> make the domain group a member of the local built-in Remote Desktop
> Users group on the TS.
> This built-in group has by default permission to logon to the TS.
> Then reset the rdp-tcp permissions to the default settings (click
> on "Advanced" and then "Default").
> You might have to reboot the server for this to take effect.
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> *----------- Please reply in newsgroup -------------*
>
> =?Utf-8?B?T3JlbiBSLg==?= <OrenR@discussions.microsoft.com> wrote
> on 01 apr 2008:
>
> > 1 DC server. 2 TS servers joined to domain.
> >
> > on both TS a domain group was granted access. (using terminal
> > services configuration > rdp-tcp > permissions).
> >
> > after adding the group, all users joined to the group can access
> > both TS.
> >
> > after severl hours (sometimes a day or two) users are denied
> > access to the TS. when checking the configuration, i can see the
> > group in the permissions tab. if i remove the group, apply, add
> > the group again and apply, users can access again to the TS.
> >
> > appreciate your help on solving this problem.
> >
> > Thanks,
>
 
Back
Top