Welcome to the ThinManager Knowledgebase.
Additional knowledgebase articles can be found at Rockwell Automation Tech Support.

If you would like to speak with one of our engineers, please Submit a Question or give us a call at the phone number here. In North America, To route your phone support request directly to a technical support engineer, call toll-free 1-888-382-1583 or 1-440-646-3434, select Option 3 (Technical Support), then select Option 5 (More Options). When prompted, enter the ThinManager Direct Dial Code 201.

Difference between revisions of "Allow log on through Terminal Services"

From ThinManager Knowledge Base
Jump to: navigation, search
 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
http://scorpiotek.com/blog/?p=742
+
[[Category:System_Configuration]]
 +
[[Category:Troubleshooting]]
 +
==Overview==
 +
By default, Windows Server does not allow login through remote desktop services by Non-Admin users. This can present problems when deploying ThinManager and configuring thin clients to use a regular user account.
  
How to grant ‘Allow log on through Terminal Services Right’
+
==Symptoms==
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Destop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have ths right, you must be granted this right manually.
+
When trying to login through remote desktop services to a server with a Non-Admin account, you will be prompted with the following error:
 
+
<blockquote>
<BLOCKQUOTE>"I was setting up remote access for a user on a domain controller for some tests. This user was not an admin (but belonged to the Remote Desktop Users) and kept getting the same error message above. Setting this user to domain admin solved the problem, but of course I did not want to make any remote user a domain admin. <br/>
+
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.
 
+
</blockquote>
"It so happens that it is not enough for a user to belongs to the Remote Desktop Users to gain the rights it needs." </BLOCKQUOTE>
+
<center>[[File:Tsloginerror.png|Unable to Login]]<br>''Unable to Login''<br></center>
 
+
==Resolution==
Here is how you fix this:
+
The simplest way to resolve this issue is to add your thin client users into the Remote Desktop Users Group (or any other group for that matter) then grant that OU the "Allow log on through Remote Desktop Services" ("Terminal Services" in pre 2008 R2 releases) via:<br>
 
+
*Start > Run > gpedit.msc
Open gpedit.msc (the local group policy editor)
+
*Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
Expand Local Computer Policy –> Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
+
*Select: Allow log on through Remote Desktop Services
Look for the setting on the right called Allow log on through Remote Desktop Services
+
*Add Remote Desktop Users to the Policy.
Double click this policy
+
*To apply the changes: Start > Run > gpupdate /force
Add the user/group you would like to have remote access to the box.
 
Once this was done, the user was able to connect w/o hassles.
 

Latest revision as of 19:46, 4 September 2014

Overview

By default, Windows Server does not allow login through remote desktop services by Non-Admin users. This can present problems when deploying ThinManager and configuring thin clients to use a regular user account.

Symptoms

When trying to login through remote desktop services to a server with a Non-Admin account, you will be prompted with the following error:

To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.

Unable to Login
Unable to Login

Resolution

The simplest way to resolve this issue is to add your thin client users into the Remote Desktop Users Group (or any other group for that matter) then grant that OU the "Allow log on through Remote Desktop Services" ("Terminal Services" in pre 2008 R2 releases) via:

  • Start > Run > gpedit.msc
  • Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
  • Select: Allow log on through Remote Desktop Services
  • Add Remote Desktop Users to the Policy.
  • To apply the changes: Start > Run > gpupdate /force