Allow log on through Terminal Services - Revision history

Dcoulter at 19:46, 4 September 2014

2014-09-04T19:46:16Z

← Older revision		Revision as of 19:46, 4 September 2014
Line 16:		Line 16:
	*Select: Allow log on through Remote Desktop Services		*Select: Allow log on through Remote Desktop Services
	*Add Remote Desktop Users to the Policy.		*Add Remote Desktop Users to the Policy.
			*To apply the changes: Start > Run > gpupdate /force

Dcoulter at 19:41, 4 September 2014

2014-09-04T19:41:09Z

New page

[[Category:System_Configuration]]
[[Category:Troubleshooting]]
==Overview==
By default, Windows Server does not allow login through remote desktop services by Non-Admin users. This can present problems when deploying ThinManager and configuring thin clients to use a regular user account.

==Symptoms==
When trying to login through remote desktop services to a server with a Non-Admin account, you will be prompted with the following error:
<blockquote>
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.
</blockquote>
<center>[[File:Tsloginerror.png|Unable to Login]]<br>''Unable to Login''<br></center>
==Resolution==
The simplest way to resolve this issue is to add your thin client users into the Remote Desktop Users Group (or any other group for that matter) then grant that OU the "Allow log on through Remote Desktop Services" ("Terminal Services" in pre 2008 R2 releases) via:<br>
*Start > Run > gpedit.msc
*Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
*Select: Allow log on through Remote Desktop Services
*Add Remote Desktop Users to the Policy.

Pburns at 19:24, 7 November 2012

2012-11-07T19:24:53Z

New page

http://scorpiotek.com/blog/?p=742

How to grant ‘Allow log on through Terminal Services Right’
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Destop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have ths right, you must be granted this right manually.

<BLOCKQUOTE>"I was setting up remote access for a user on a domain controller for some tests. This user was not an admin (but belonged to the Remote Desktop Users) and kept getting the same error message above. Setting this user to domain admin solved the problem, but of course I did not want to make any remote user a domain admin. <br/>

"It so happens that it is not enough for a user to belongs to the Remote Desktop Users to gain the rights it needs." </BLOCKQUOTE>

Here is how you fix this:

Open gpedit.msc (the local group policy editor)
Expand Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> User Rights Management
Look for the setting on the right called Allow log on through Remote Desktop Services
Double click this policy
Add the user/group you would like to have remote access to the box.
Once this was done, the user was able to connect w/o hassles.