Domain users can't connect to TS

  • Thread starter Thread starter James Williams
  • Start date Start date
J

James Williams

Hello,

I have setup a couple of user accounts for logging onto the Win2000 TS,
however I keep geting the following error when they try to connect: "The
local policy of this system does not permit you to logon interactively".

I have enable the user account to allow terminal server connection, what
else would cause this?
My server is configured as a domain controller as well as a Terminal server.
However I have setup the user accounts to only start a specific application.


Regards,


James
 
PSS ID Number: 285793
CAUSE
This issue may occur if the "Deny logon locally" policy is set on your
computer.
 
This policy is not set.
Any other ideas?

Brock said:
PSS ID Number: 285793
CAUSE
This issue may occur if the "Deny logon locally" policy is set on your
computer.
Click to expand...
 
If your TS is a DC you must alter the Default Domain Controllers Security Policy to allow this user to "Log on Locally", which is the main reason people don't recommend running TS on a DC.

Domain Controllers Require the "Log on Locally" Group Policy Object for Terminal Services Client Connection
http://support.microsoft.com/default.aspx?scid=kb;en-us;q24798

More how tos here
http://www.workthin.com/tshta.ht

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- James Williams wrote: ----

This policy is not set
Any other ideas
 
Exactly as Patrick mentions.

By default on DC only members of Admninistrators, Backup
Operators, Account Ops., Server Ops. & printer ops. are
allowed to logon locally. So now either add your user to
one of em or add the user you want to the Log on Locally
policy on the DC using the domain controller security
policy
-----Original Message-----
If your TS is a DC you must alter the Default Domain
Click to expand...
Controllers Security Policy to allow this user to "Log on
Locally", which is the main reason people don't recommend
running TS on a DC.
Domain Controllers Require the "Log on Locally" Group
Click to expand...
Policy Object for Terminal Services Client Connections
 
Back
Top