packdragon
IS-IT--Management
This is our first installation of Windows Server 2003, so I am new to some of the features that make this one different from 2000. I understand that 2003 comes with most of the security holes closed, so users have to open up holes themselves for particular types of access.
Here's the setup - the 2003 box is on a 2000 domain. I am able to log on remotely if I use the built-in Domain Admins account. I am trying to get it so users from another subnet can log on remotely like they can with all the other servers sitting alongside the 2003 box.
When I attempt to log on through Terminal Services, I get the message, "Your interactive logon privilege has been disabled". Sounds like a permissions issue. Here's what I've tried so far:
1. I added myself to the Remote Desktop Users group.
2. I added myself to the local Administrators group.
3. The trial period of Terminal Services has not expired yet because I am able to use it with the Domain Admin account.
4. Verified that Administrators and Remote Desktop Users are set to "Allow Log On Through Terminal Services" in Local Security Settings.
5. Rebooted the computer after all these changes.
None of this has worked and I have run out of useful documentation. Can anyone point me to any other settings I need to change in order to allow non-Domain Admin users remote access?
- Zoe, that's ZOH-EEE, get it right please
- Just a little ol' MCP at Solien Technology
-
Here's the setup - the 2003 box is on a 2000 domain. I am able to log on remotely if I use the built-in Domain Admins account. I am trying to get it so users from another subnet can log on remotely like they can with all the other servers sitting alongside the 2003 box.
When I attempt to log on through Terminal Services, I get the message, "Your interactive logon privilege has been disabled". Sounds like a permissions issue. Here's what I've tried so far:
1. I added myself to the Remote Desktop Users group.
2. I added myself to the local Administrators group.
3. The trial period of Terminal Services has not expired yet because I am able to use it with the Domain Admin account.
4. Verified that Administrators and Remote Desktop Users are set to "Allow Log On Through Terminal Services" in Local Security Settings.
5. Rebooted the computer after all these changes.
None of this has worked and I have run out of useful documentation. Can anyone point me to any other settings I need to change in order to allow non-Domain Admin users remote access?
- Zoe, that's ZOH-EEE, get it right please
- Just a little ol' MCP at Solien Technology
-