Terminal Server and Remote Desktop

[bsl1973]

We have a Windows 2008 Small Business server and we are trying to allow remote desktop users to connect with there user name and password. I have added the users to the remote desktop group and they get the following error:You do not have access to logon to this session you must be a member of the remote desktop group in Terminal Services. Is there some kind of other group I need to add them to or do I need a group policy setting changed. Any help would be appreciated.

 

[markdmac]

Sounds like your users are trying to access the server instead of using RWW.

Make sure your users are using

https://fqdn.company.com/remote

From there they should just be given a list of the PCs they have been assigned to. If you have not assigned PCs then do so in the SBS Admin Console.

users must also be a member of the new SBS Remote Web Workplace Users group.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[ShackDaddy]

Normally the only reason users would be using RDP instead of Remote Web Workplace is if you purchased SBS 2008 Premium, which comes with an additional server license, and you set up that other server as a Terminal Server. You'd still need Terminal Services CALs, but if you set that server up you could provide user desktops on that server and run apps there. You don't want to run apps and allow users direct logon to your SBS 2008 Server, and it's been designed to make it difficult to do that, for good reason.

By default normal users are not allowed to log on to a domain controller via terminal session or locally, so that's one factor, plus to come in via RDP, they'd need to be added to appropriate local groups.

Why don't you post what it is you're trying to accomplish for the users and let us help guide you to a workable solution that isn't a big security/stability problem.

Dave Shackelford
ThirdTier.net

 

[bsl1973]

It is only for 2 users. There is no way around getting them connected to the Terminal Server?

 

[markdmac]

If you just have SBS, then you don't have a terminal server. SBS is prevented from entering application sharing mode. It offers remote access for admins only.

You have the tools you need, why are you not using them? Give your users access to RWW.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[ktmrandy]

You need to modify Default Group policy. Under Local Security Policy, user rights assignment. Add the Remote Desktop Users group to the "Allow logon through Terminal Services"
This applies to logging onto the server through the remote web or remote desktop directly.
Default policy is to only allow administrators to remote desktop in.