Welcome to the ThinManager Knowledgebase.
Additional knowledgebase articles can be found at Rockwell Automation Tech Support.

If you would like to speak with one of our engineers, please Submit a Question or give us a call at the phone number here. In North America, To route your phone support request directly to a technical support engineer, call toll-free 1-888-382-1583 or 1-440-646-3434, select Option 3 (Technical Support), then select Option 5 (More Options). When prompted, enter the ThinManager Direct Dial Code 201.

Difference between revisions of "Allow log on through Terminal Services"

From ThinManager Knowledge Base
Jump to: navigation, search
(Created page with "http://scorpiotek.com/blog/?p=742 How to grant ‘Allow log on through Terminal Services Right’ To log on to this remote computer, you must be granted the Allow log on thro...")
 
 
(3 intermediate revisions by 3 users not shown)
Line 1: Line 1:
−
http://scorpiotek.com/blog/?p=742
+
[[Category:System_Configuration]]
 +
[[Category:Troubleshooting]]
 +
==Overview==
 +
By default, Windows Server does not allow login through remote desktop services by Non-Admin users. This can present problems when deploying ThinManager and configuring thin clients to use a regular user account.
  
−
How to grant ‘Allow log on through Terminal Services Right’
+
==Symptoms==
−
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Destop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have ths right, you must be granted this right manually.
+
When trying to login through remote desktop services to a server with a Non-Admin account, you will be prompted with the following error:
−
 
+
<blockquote>
−
I was setting up remote access for a user on a domain controller for some tests. This user was not an admin (but belonged to the Remote Desktop Users) and kept getting the same error message above. Setting this user to domain admin solved the problem, but of course I did not want to make any remote user a domain admin.
+
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.
−
 
+
</blockquote>
−
It so happens that it is not enough for a user to belongs to the Remote Desktop Users to gain the rights it needs. Here is how you fix this:
+
<center>[[File:Tsloginerror.png|Unable to Login]]<br>''Unable to Login''<br></center>
−
 
+
==Resolution==
−
Open gpedit.msc (the local group policy editor)
+
The simplest way to resolve this issue is to add your thin client users into the Remote Desktop Users Group (or any other group for that matter) then grant that OU the "Allow log on through Remote Desktop Services" ("Terminal Services" in pre 2008 R2 releases) via:<br>
−
Expand Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> User Rights Management
+
*Start > Run > gpedit.msc
−
Look for the setting on the right called Allow log on through Remote Desktop Services
+
*Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
−
Double click this policy
+
*Select: Allow log on through Remote Desktop Services
−
Add the user/group you would like to have remote access to the box.
+
*Add Remote Desktop Users to the Policy.
−
Once this was done, the user was able to connect w/o hassles.
+
*To apply the changes: Start > Run > gpupdate /force

Latest revision as of 19:46, 4 September 2014

Overview

By default, Windows Server does not allow login through remote desktop services by Non-Admin users. This can present problems when deploying ThinManager and configuring thin clients to use a regular user account.

Symptoms

When trying to login through remote desktop services to a server with a Non-Admin account, you will be prompted with the following error:

To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.

Unable to Login
Unable to Login

Resolution

The simplest way to resolve this issue is to add your thin client users into the Remote Desktop Users Group (or any other group for that matter) then grant that OU the "Allow log on through Remote Desktop Services" ("Terminal Services" in pre 2008 R2 releases) via:

  • Start > Run > gpedit.msc
  • Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
  • Select: Allow log on through Remote Desktop Services
  • Add Remote Desktop Users to the Policy.
  • To apply the changes: Start > Run > gpupdate /force
Retrieved from "https://kb.thinmanager.com/index.php?title=Allow_log_on_through_Terminal_Services&oldid=7767"