Remote Desktop Help

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi Guys.

Sorry if this is in the wrong forum, not sure where to put it?

Having a problem logging onto my Server 2003 machine via Remote Desktop. I can log on as admin ok, but when I try to log on with any other user account that belong to Domain Users Group I keep getting the following message...

"You do not have access to log onto this session"

Originally I was getting "The local policy does not permit you to logon interactively" message. I managed to sort this by adding the Domain Users Group to the "allow logon through Terminal Services" Policy on the Default Domain Policy.

What’s weird also is that if I access the Default Domain Policy through Administrative Tools the policy has loads of policies defined, but if I access the Domain Policy through Active Directory Users and Computers (My AD server, server01) the same policies are all set to not defined, even though Group Policy tab shows that the Default Domain Policy is being used!?

Can anyone point me in the right direction as I'm tearing my hair out here!

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

The right policy is "Domain controller securuty policy", if you need
to log on a DC
Nico

 

And you need to add the group that contains the users you want to log on to the server, to the servers local Remote Desktop group via Computer Management> Local Users and Groups.

 

Yes I'm logging on to the DC with Remote Desktop (TS). The default domain policy has been edited to enable me to do this, but I still can't log on with domain user accounts.