Small Business Server Terminal Services Permissions

[maximusimo]

Hi,

Small Business Server 2000 with Terminal Services installed.

I have a few thin clients which log onto Windows via Terminal Services with no problems. The only thing is that the person who set them up seen fit to add them to the Domain Admins group so that they could log onto the Terminal Server, it seemed to be the only way to get them on. Well obviously this isnt ideal and i was wondering what permissions a user should have and where or a group they should be members of so as to enable log on without being a member of Domain Admins.

In their user properties i have already checked "Allow log on to Terminal Server" and have even created a profile for this client users to use.

I am doing this for a test account first with GPO enabled locking everything down but need to make all works before moving current TS users.

 

[maximusimo]

At the minute I get the message

"The local policy does not permit you to logon interactively"

when i try to logon with the test account

 

[progeekit]

Sound like Terminal Server was installed in "Remote Administration Mode" which will only allow admins to log on. For normal users to use terminal services, it needs to be installed in "Application Server Mode"