Terminal server rights

[lashboy]

Hey guys,

we have a 2003 server which is DC and now i also installed terminal server license on it so that few users can log in remotly. but user can only RDP if i give them Administrative rights! how to get users log in without giving them Administrative rights??

 

[58sniper]

I wouldn't recommend that you use Terminal Services on a DC for security reasons and for resource reasons. That's the main reason why you can no longer use TS on an SBS box.

Did you make them members of the Remote Desktop Users Group?

Pat Richard, MCSE MCSA:Messaging CNA
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[Andreh]

Do you want the users to log onto the DC as the terminal server? Or, do you have another server that is your terminal server? This wasn't that clear.

To allow terminal services to service users, you need to install Terminal Services in +/- programs in Win2k3, not just TS licensing.

There is also a more important issue here....
If you want to set up your DC as a TS then you are doing something very risky. I would never do this myself for stability and security reasons even if it is a couple of users. You need admin rights to log onto a DC.


"Assumption is the mother of all f#%kups!

 

[lashboy]

thanks for replies. it is not SBS box, it is win 2003 standard server. I am IT consultant and we have this company which dont want to spend more money on terminal server and they also want to use RDP so this leaves me no choice . i have install all terminal server not only licensing and yes they are member of remote desktop group.. i think i have to make some changing in group policy!

 

[Andreh]

I know those sort of clients!! Want the world but not the bill that goes with it. Good luck

"Assumption is the mother of all f#%kups!

 

[lashboy]

Hey Guys this is what I did after some research so now i dont have to give Administrative rights to users to log in to server.

1. Enabled user right allow logon through terminal server in default domain controller policy.

2. Added remote desktop users group to it.

3. Added domain users to the remote desktop users group.

4. Refreshed the group policy & made connections without any errors.