Terminal Services

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

OK gang, heres another one.

I'm playing with Terminal Services and I have set up the server and added Microsoft Word to practice on but can I connect from my client??? No can I hell.

I have two accounts, Admin and User and neither can connect. Both are members of Remote Desktop Users group.

Both Domain Controller and Default Domain policy have had RDUsers physically added to the 'Allow log on to Terminal Services' right.

I keep getting

"To log onto this remote computer, you must have Terminal Server User Access permissions on this computer blah blah blah etc"

I have done gpupdate just in case and logged users off and on after.

Why can't I log on?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Have you added the group to the RD allowed setting on the physical server you want them to rdp to.

 

Yes they have to be member of the of the remote desktop users group on the actual terminal server.

Check they you have not got a deny logon within the users account properties in Active directory, or a deny within group policy settings that applies to user or group that is trying to access the terminal server.

 

Can you elaborate on this?? I thought there was only one RDU group? The builtin one?

Remember you're talking to a novice as far as Active Directory and Group policy goes MCSA doesn't really cover it

 

If its a DC, you need to Allow Logon Locally

 

Under the run menu type in gpedlit.msc-under computer configuration-windows settings-account policies-local policies-user rights assignment, look for "Allow log on locally. Finally ensure the user or group is added in to log on locally.

Cheerio and best wishes

 

Yep they all have log on locally right and noone is denied neither grrrrr

 

So did you end up resolving it? What was the solution?