Terminal Services Error 1

[dannymitchell]

I get the following error message when logging onto my 2k3 server through terminal services as all users apart from administrators:

to log onto this computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop User or another group that has these permissions, or if the Remote Desktop Users does not have these permissions, you must be granted these permissions manually.

I have checked the remote desktop users group, terminal services config and also the local policy and the only way around it appears to be granting the users admin rights. Is it something thats been missed during setup?

Thanks,

Dan

 

[adcfaq]

focus on local TS policy, that preventing from user to RDP.

 

[Castor66]

If this is terminal services for administration then you must be an administrator on that machine to logon via terminal services.

 

[dannymitchell]

yes, I can login as administrator through TS and i can do all you would expect. Its if i login as any other user that i have the message.

 

[Castor66]

Refer to my post. Try making the user a local administrator on the server and see what happens.

 

[dannymitchell]

Done that. If I grant admin rights they're fine.

 

[Castor66]

I repeat my post:

If this is terminal services for administration then you MUST be an administrator on that machine to logon via terminal services. There is no alternative.

 

[dannymitchell]

terminal services for administration. Sorry, i'm fairly new to this. Could you explain a bit more. Thanks

 

[AnimusTek]

Terminal Services for administration is for administration by administrators only. It is not set up to be used by regular users, only administrators. This is a built-in feature. If you want more, contact your software vendor for Terminal Services licensing for application mode. There is no way around this. You can give your users Administrator/Domain Admin rights, but it is still restricted to 2 concurrent sessions.

Generally is is a bad idea to do the following:

1. Give regular users admin rights
2. Allow regular users to log into servers as administrators

AnimusTek

 

[dannymitchell]

Thats fine, but i just want my regular users to be able to log in. The box is to be used as a citrix server with 2 published apps. Normal users get the error that i first posted. its 2k3 standard edition with IIS, Terminal Services Licencing and Terminal Services as the extra components. Nothing else. Its a complete new install with sp1 and then Citrix Presentation Server in place. My test account is a member of the Remote Users group.

 

[lsysamc]

I have this exact issue. One of my 2k3 servers (citrix) is fine, the other gives me the same error message. Has there been a soulution?

Andrew

 

[JWP1]

Similar issue here. I have 1 Terminal Server functioning properly within an AD domain. I put the second AD server up, enabled Term Server and only the administrator can log in. I've checked that replication is working properly. I wonder if the AD user needs to have a roaming profile? Might this be it?

 

[WANguy2k]

Did you guys set up a Terminal Services Licensing server? You have to set up terminal services licensing either on the terminal server or on another machine that will act as the licensing server. If you didn't terminal services for non-administrators stops working after 90 days. See:

http://www.microsoft.com/technet/prodtechnol/win2kts/deploy/tslicen.mspx

 

[JWP1]

Licensing is not an issue for me as TermServer1 (which has TS license server running) has been operational for quite some time and users have no problem logging into. TermServer2, which I have just brought up, is the one I am having problems with. It looks like AD is setup properly and that replication is taking place. It also looks like Group Policy has replicated and that Terminal Server is properly enabled for anyone in the Remote Desktop Users group. Yet, a user can't login to TermServer2 but they can login to TermServer1. Does a user need to have a roaming profile to login? Or, can it be something else?

 

[WANguy2k]

Not to beat a dead horse or anything, but you may still have a licensing problem. Just because one terminal server is working doesn't mean the other one will. When you install the terminal server, I think you have to tell it where it's getting its client licensing from, or make it a TS for administration server. You would need to point it at the other TS to obtain licensing. Otherwise, if it's just a TS for administration server, you can't logon with a non-administrator ID.