Remote desktop won't connect, users added, RDP enabled

[hgate73]

I'm having an issue with our Vista boxes.

Windows Vista Enterprise.
- Remote desktop is enabled
- The appropriate users are added to the "remote desktop users" group
- Windows firewall is disabled
- I can ping the machine

But when I try connecting, it fails.

Any ideas? I'm stumped!

I was previously posting under "GeneralDzur" but hgate73 is my new username.

 

[kjv1611]

Are you sure it isn't a problem with the machine(s) from which you're trying to connect?

Which version(s) of windows have you tried to connect from?

Are all the PCs members of the same Windows Domain or Workgroup?

 

[hgate73]

Hi KJV1611,

All PC's are on the same domain. The pc I'm connecting /from/ is Windows XP SP3, so I think it has the new Remote Desktop client installed. The box I'm connecting /to/ is Windows Vista Enterprise SP2

I was previously posting under "GeneralDzur" but hgate73 is my new username.

 

[kjv1611]

There MAY be some issues between XP and Vista/7 with Remote Desktop Connections. I haven't really delved into that area, but I know in some testing my brother and I did, over VPN over IP, he used XP at the moment, and I used Win7 on my end. For whatever reason, he could connect (via GBridge) over VNC, but didn't even get the option for Remote Desktop. However, I could connect via another Win7 PC, and get the remote desktop connection just fine.

Sorry I can't personally be of any more help than that, but that's where I'd look first.

 

[hgate73]

Hey, that's okay, thank-you for the advice anyway

I solved the issue, the setting "Deny Logon through Terminal Services" (secpol.msc) was set to include "everyone." I removed that, and the problem went away. However, I'm trying to figure out how to change that setting from the command-prompt, since we have 180 computers and running to each one individually to flip that setting would cause a huge headache.

I was previously posting under "GeneralDzur" but hgate73 is my new username.

 

[kjv1611]

Yeah, I'd imagine so. Glad you at least found the solution.

 

[linney]

Are these 180 machines on a Domain, if so, (Domain) Group Policy should be sent out to all the machines?

Working with Group Policy

http://www.petri.co.il/working_with_group_policy.htm

 

[hgate73]

They are, but I am not a domain Admin, just a have local admin rights on the boxes assigned to me. I've gotten permission to override the setting, but doing it manually would take too long. It only appears on some systems though - ones that were upgraded from XP SP3 to Vista SP2 using SMS.

I was previously posting under "GeneralDzur" but hgate73 is my new username.