[gptalk] Re: Terminal services logon

  • From: "Buonora, Craig \(GE, Research, consultant\)" <buonora@xxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 30 Apr 2007 07:15:01 -0400

Neil how do you have this configured regarding the Domain group? Did you
put the Domain group into the Local GPO [gpedit.msc] as having the
ability to log on locally and without them in Local Admins? Where in
your Domain GPO do you have this set, meaning what OU? 

Regards,

Craig 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Neil Berry
Sent: Monday, April 30, 2007 5:40 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Terminal services logon

Hi all,

I wonder if anyone has encountered the following problem and could give
me a clue on the following.

I have a GPO which is preventing users using TS/RDP to access servers
remotely.

They receive the error message "The user has not been granted the
requested logon type at this machine".  The users are in the same domain
and have the "Allow Logon through terminal services" right through a
domain group.  The policy is definately GPO related as it works if I 
remove GPO or put the users into the local administrators group.    
There are lots of security restrictions in the GPO but nothing that
should obviously cause this - I have Authenticated users and users in
'access this computer from the network".

If anyone has any ideas they would be much appreciated.

Great group btw - I have learnt loads and always read :)

Thanks
Neil




***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: