User does not get Desktop in TS Session

[spazman]

Okay, I put up TS. Domain Member.

Domain Users are members of Remote Desktop USers and Remote Desktop Users are permitted to logon to Terminal Services on this server.

The user Logs in, and never gets a desktop or process the login script. Explorer will not run. I can run process eplorer, and I can run cmd.exe from there but not Explorer.exe or anything else.

If the Domain Users is made a member of the local admins group they login.

For obvious reason I do not want user being admins on the TS.

So any ideas why a non admin user will not get a Desktop?

I have searched google etc all the responses are related to "Is the user a member of Remote Dekstop User?" and similiar.

 

[spazman]

Somehow, somewhere Authenticated Users was removed from HKLM\Software\Classes\CLSID with the READ permission to the whole key.

I found this out by turning on auditing and looking for failures. I ended up adding Domain Users in instead of Authenticated Users, I think this would only be a problem if I had multiple domains. I found out it was Authenticated USers by looking at the old TS server, once I had fixed the issue.