[gptalk] Re: Terminal services logon

  • From: Robert Tannehill <rtannehill@xxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Mon, 30 Apr 2007 08:43:45 -0700

Neil,
Also, check that the "allow logon to terminal server" box is checked on
the User TS profile tab.

Cheers,
Bob
 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Monday, April 30, 2007 4:15 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Terminal services logon

Neil how do you have this configured regarding the Domain group? Did you
put the Domain group into the Local GPO [gpedit.msc] as having the ability
to log on locally and without them in Local Admins? Where in your Domain
GPO do you have this set, meaning what OU? 

Regards,

Craig 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Neil Berry
Sent: Monday, April 30, 2007 5:40 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Terminal services logon

Hi all,

I wonder if anyone has encountered the following problem and could give me
a clue on the following.

I have a GPO which is preventing users using TS/RDP to access servers
remotely.

They receive the error message "The user has not been granted the
requested logon type at this machine".  The users are in the same domain
and have the "Allow Logon through terminal services" right through a
domain group.  The policy is definately GPO related as it works if I 
remove GPO or put the users into the local administrators group.    
There are lots of security restrictions in the GPO but nothing that should
obviously cause this - I have Authenticated users and users in 'access
this computer from the network".

If anyone has any ideas they would be much appreciated.

Great group btw - I have learnt loads and always read :)

Thanks
Neil




***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: