Hi, I'm running a Windows 2000 Server (DC) and a Windows 2003 Terminal Server. Yesterday everyone, inc me(Administrator) could log into the Terminal Server remotely. However, today when anyone (including me) tries I get the following error. (It does not make sense it would work one day and not another, without any changes being made)
"To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are no a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."
it makes sense.... When the 2003 server is first installed it assumes it will take you a while to get the lic server set up, so from the time the first user logs in via terminal services it gives you 120 days to get the lic server in place.
After 120 days it requires that the users logging in are in the "Remote Desktop User Group" or that they have the "Terminal Server User Access Right". There are also licence requirements needless to say :-P
Anyway, that sounds like what happened in your case, you made no changes but the 120 days expired (rember it is from the first terminal services login, not since the server went in).
Because the DC is win2k the "Remote Desktop User" group is not there :-( [it should be in the AD users + Groups under built in accounts].
This is where i am stuck myself at the moment :-) Trying to fix an almost identical problem.
As a work around for the admins, install VNC as a service. It will allow you access to the server desktop via the viewer. its not ideal but it means you can do SOME stuff as before.
hope this helps.
S
Woohoo!!!!! got it :-) as ever you feel feel foolish when you get it :P
go into the terminal server config, right click the connection and go to properties. In there you need to add the users that can terminal server in :-)
you'll still need to get lics though.
hope this fixes it for you too :)
S
| « What is the simplest set ... | Login slow in win2k3 serv... » |