Most users can not log onto PS4 Server

[bluewhaleCA]

We have two PS4 servers, one in each office. The unit in our remote office allows myself or Domain Admins to log in via ICA however most users get the 'To log on to this remote computer, you must be granted the Allow log on through Terminal Services right.' error.

My experience with Metaframe farms is very limited. We do have these two set up in one farm and are sharing the Metaframe and TS licenses, which are both housed in our own MF server here. I put one user into the Remote Desktop group on the remote MF server and she can log in via ICA, however none of the other non-admin users can. They all CAN log into our MF server here in home office tho.

I have been googling this most of the day and have seen many suggestions however none have helped. I'm curious about a couple of things :

1: The home office MF server shows the following in the Remote Desktop Users group: NT AUTHORITY\Authenticated Users
However the remote MF server shows only the one employee I added there. I find I can't add the NT group to the remote MF server under Add in Remote Desktop Users... Any thoughts on adding this group?

2: The employees who can not log onto the remote MF server DO have rights to log onto TS servers ( else they could not log onto the home office MF server ). Some of the posts I've read indicate the Citrix Farm settings control this access: I'm uncertain if the problem is TS or Metaframe. ?

3: I have checked the TS installation on the remote MF server. The checkbox in add/remove Windows components is checked and is clear, thus I believe that confirms this is an application installation instead of remote admin for TS. ?


Thanks for any tips you might have.

 

[enigma99]

bluewhaleCA,
Here is what you need to do.
If you don't have a Global Group created for Citrix access...create one and dump your users in that group.

Once you have that global group created and populated...give it rights to access the Terminal Server by putting them in the Remote Desktop Users group AND giving them access to the published application via the Citrix Management Console.

If you already have a global group created within A/D for your Citrix users. Make sure they have rights to the Terminal Server by adding them in the Remote Desktop Users group AND make sure they have rights to the published application within the Citrix Management Console.

Hope that helps.

 

[bluewhaleCA]

Yes thanks, it helps a lot.

I'm still curious tho: I've never had to add anyone to the remote desktop group... Of course we only recently have moved the MF servers to Server 2003. But in the case of our home office MF server the entry in the RD Group was done by Citrix when installing. Sort of wondering why the remote MF server would not have done the same?

 

[enigma99]

bluewhaleCA,
This is new to Windows 2003 Server.
The Citrix MPS install should of asked you in the middle of the install if you wanted to add any users to the Remote Desktop Users group.

You can either defer or add the user/group at that time.
So you can defer until after the Citrix Presentation Server installation is complete.

Hope that helps.

 

[bluewhaleCA]

While I like to RTFM getting the information directly is SOOOO much faster.

Thanks.

Paul