Windows Forum

Ask something
Discussion Locked

Terminal Services logon still

0 helpful
5 replies

by simon

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi still haveing problems, I have a terminal services server setup and I am having problems allowing remote users logging on, even in house on the same network, I get the error the 'local policy of this system does not allow you to log on interactivly'

I have a VPN Users group, added users to that group and though Domain Controller Security Policy allowed them to log on locally.

The administrator can log on fine,

Driving me mad, I have tried allowing VPN Users Logon local access through the Domain Security Policy & Domain Controller Security Policy but still the same.

I can add the VPN users to one of the current 'allowed' groups shown in DCP (eg Server operators) and it works OK but they can shut down the server etc...

I did this (see answer at https://www.techrepublic.com/forumqa/thread_detail.jhtml?thread_id=132694) and it worked for a while but now it has stopped again.

Any help would be appreciated.

5 replies

by curacao_dejavu

Hi,

Here's the solution:
http://support.microsoft.com/default.aspx?scid=kb;en-us;246109

I had this under TSE for NT too.
I had then the options for "access this computer via the network" and "users may logon locally" restricked for only certain groups.

Leopold

by simon

I already have that :-(.

I have an OU called VPN Users and made a GP for that OU and allowed 'log on locally' in Computer configuration\Security Settings\Local Policies\User Rights Assignment\

I also have Authenticated Users.

So this hasn'thelped any other ideas?

Thanks

by quintar51

Hi Simon,

Try configuring the domain controller policy to allow the 'Log in interactively' as well.

by simon

I can't find that?

Try configuring the domain controller policy to allow the 'Log in interactively' as well.

by kinetechs

Are you having the users log onto the DC? If not then modifying the Domain Controller Security Policy will do nothing to help. Try creating or midifying a GPO that will apply to the computer that is hosting TS.

Cheers!
~Sean

This discussion is closed to new replies.