General discussion

Locked

Term Services

By d.jones092 ·
Closed this one the other day because I thought I had a fix. Please see below:

"This is going to be a tough one, I think.

I've got term services set up on my Win2k server, and am currently testing it for deployment to our remote sites. This is really my first dabble with term services, so I'm a complete newbie.

Anyhoo...Myself and the other IT person here are able to log into the term server using the client with no problem. We are both Administrators. However, when trying to log into the term server using one of my user's logons, I get "The local policy of this system does not allow you to log in interactively".

I've looked at my local policy on the server, and nothing stands out. To be certain, I added "Terminal Server Users" to the "Log onto this machine locally" policy on the server. I have also verified that the user(s) in question have "Allow Terminal Server login" checked in their user profile in AD.

This is a sticky one.

Any thoughts? "

Update: I found I had not activated my license server within the 90 grace period before slipping back into Remote Admin mode. So, I activated my server with a 10 cal license pack for Term Services. I did have the term services licensing component installed on my main term server, however I removed it upon activation of my license server. I added a DefaultLicenseServer key to the registry of the term server that points to my login server, and reinstalled Term Services to force it back into Application Server mode. The licensing server piece is installed on a domain controller (not the FSMO).

This is still not working...giving the same error as before "The local security policy of this system does not allow you to login interactively".

Something else of note: My test users do not have a term services profile set up, or a home directory (don't know if that makes a difference or not).

At this point, I'm stumped.

Any info would be greatly appreciated.

Dennis Jones

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Kinetechs In reply to Term Services

Hi,
Open the "Terminal Services Configuration" MMC from the "Administrative Tools" folder. double-click the RDP-Tcp connection in the "Conections" folder. On the "Permissions" tab, add the users and/or groups and give them the appropriate access.

This should solve the problem.
cheers!
~Sean

Collapse -

by d.jones092 In reply to

Poster rated this answer.

Collapse -

by d.jones092 In reply to Term Services

Hi.

Actually, I forgot to mention in the original post that I have added the users to the RDP permissions w/User and Guest access rights. Still nada.

Dennis Jones

Collapse -

by Curacao_Dejavu In reply to Term Services

I have a couple of links for you, depends of how your configuration is exeactly you will have to check them out.

http://tinyurl.com/tt5i
http://tinyurl.com/tt5q
http://tinyurl.com/tt5s
http://tinyurl.com/tt5v
http://tinyurl.com/tt5z


Leopold

Collapse -

by d.jones092 In reply to

Poster rated this answer.

Collapse -

by d.jones092 In reply to Term Services

Leopold:

Thanks for the links. I am leaning towards a problem with my local policy as well. Here's why:

Upon checking the "Log on locally" policy on the term server, I noticed that the Current Policy and Effective Policy for the Administrator's group are both checked.

At some point in the past (for what reason, I'm not sure) I put my name and the other IT person's in the policy as well, and I noticed that Current Policy is checked, while effective policy is not checked.

So, I went to "Deny Logon Locally" to verify what your links showed, and there is nobody in the policy, meaning I never explicitly denied anyone. This is getting more and more frustrating.

Thanks for any info.

Collapse -

by d.jones092 In reply to Term Services

Something else of note...this server is a domain controller.

Also: Is there a command that can verify whether or not the term server is in application server mode?

Collapse -

by d.jones092 In reply to Term Services

OK...last time. I forgot to mention that the term server is also one of our DCs. We had to install it there for reasons beyond our control.

So, we went in and changed the DC Policy for "Allow Logon Locally" to Authenticated Users, and we are now all set.

Dennis Jones

Collapse -

by d.jones092 In reply to Term Services

This question was closed by the author

Back to Windows Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums