Are their accounts set to only log them in from a certain machine? Also you need to make sure that their settings in Users and Computers to logon to TS is ticked... Terminal Services Client Error Message: You Do Not Have Access to Logon to This Session View products that this article applies to. This article was previously published under Q224395 SYMPTOMS When you try to log on using the Terminal Services client, you may receive the following error message: Logon Message: You do not have access to logon to this session. CAUSE Terminal Services has a default connection security setting allows only administrators to log on. If the security attributes on a specified connection have not been set, the connection inherits these default security settings. For additional information, please see the following article in the Microsoft Knowledge Base: 225038 Default Connection Changes Are No longer Applied If the default connection security settings do not meet your needs, you can set custom security attributes. RESOLUTION To set custom Terminal Services connection permissions: Click Start, point to Programs, point to Administrative Tools, and then click Terminal Services Configuration. Open the Connections folder. Right-click the connection (RDP-TCP), and then click Properties. On the Permissions tab, add the group(s) that needs access to this connection. Click OK. STATUS This behavior is by design. And this from the Citrix KB 1. Verify the ICA-TCP connection permissions for the user or group receiving the error message. To set custom Terminal Services connection permissions: 1. Click Start > Programs > Administrative Tools and then Terminal Services Configuration. 2. Open the Connections folder. 3. Right-click the connection (ICA-TCP) and then click Properties. 4. On the Permissions tab, add the group(s) that needs access to this connection. 5. Click OK. Please reference MicroSoft TechNet article Q244395 for additional information. 2. Verify that other users in the same group can access the published application. 3. Isolate the application to a single server, Create and test with a brand new domain and local server account. 4. Does Published Application Manager, appcfg.exe, or the Citrix Management Console enumerate and display the group and users accounts properly? 5. This issue may occur when trying to use a dynamic local user (DLU) policy enabled on NDS user accounts in a domain and the application is published from a Netware Drive. See Novell TID 10023644 for additional information. JK -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Rod Falanga Sent: Wednesday, October 22, 2003 1:44 PM To: WINDOWS2000@xxxxxxxxxxxxx Subject: [windows2000] TS users getting "You do not have access to logon to this session" error message For some reason, which doesn't make any sense to me, external users who used to be able to connect to us using Terminal Services, now cannot. They are using the TS client (which I installed) on their Windows 2000 Professional machines. They bring up the client (I have it set up to automatically go into one of our applications), enter they username and password (and I have checked; our domain is there), but then it doesn't go through. Instead they get an error message that says, "Logon Message You do not have access to logon to this Session." I have checked on Microsoft's Knowledge Base and found the article which I thought would fix the problem. It is article 224395. I did what it suggested, which was to add the relevant group on the Permissions tab of the Terminal Services Configuration. However, after doing that the users are still getting the same error message. Why? Rod Falanga http://amci.unm.edu http://thethin.net/win2000list.cfm ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=147 ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm