Terminal Services problem

[danvant]

Hi Guys,

i have read through many of the MS articles and newsgroups. I have the just
installed a windows 2003 server in native mode. it will be a domain
controller and will have the license server installed on it as well. it will
only be host to about 5 TS connections at a time.

I am getting the age old error "the local policy of this system does not
permit you to logon interactivey" when the users try and connect using remote
desktop. I have added the users to the built in remote desktop users group
through AD users and computers, as i understood this was the only thing i had
to do.

But alas they are still unable to logon.

Any help much appreciated

 

[macfoxx]

Hi
Sorry but when you use TS on AD controller only members of administrators can login throu terminal services, you can change your domain controller policy to add other groups or users access by TS.
regards
Mac Foxx

 

[danvant]

sorry Mac Foxx,

but you are wrong, i found the answer, it was a local policy setting tucked away that had deny TS logon. TS works fine on AD DC with no problems at all MS dont recomment it for high volume use due to overhead on the DC.

 

[macfoxx]

sorry Danvant
You have right that you can change it in local policy but normally in local policy you have only Administrators group and no any others group and if you set it by domain controller
policy it's override local policy setting and it's linked to OU with domain controllers not only to one AD controller.