"Allow logon through Terminal Services" user right missing

[Jorge Silva]

Hi
The options that I told are in that link (sublinks)
You need to create a temp db, analyse it, then if you want apply the
security template to your existent DB.

Before proceed Please be careful, because by doing this your existent
security settings can be changed.
- Click Start, click Run, type mmc, and then click OK.
- On the File menu, click Add/Remove Snap-in.
- Click Add.
-In the Available Stand Alone Snap-ins list, click Security Configuration
and Analysis, and Security Templates click Add, click Close, and then click
OK.
- In the left pane, click Security Configuration and Analysis and view the
instructions in the right pane.
- Right-click Security Configuration and Analysis, and then click Open
Database.
- In the File name box, type the name of the database file, and then click
Open (Actually this will create a new temp DB with the name that you want to
give, of course you can use it again that's why it says open DB and not new
DB).
- Click the security template that you want to use, and then click Open to
import the entries that are contained in the template to the database. DC
security.inf - This template is created when a server is promoted to a
domain controller. It reflects file, registry, and system service default
security settings. If you reapply this template, these settings are set to
the default values. However, the template may overwrite permissions on new
files, registry keys, and system services created by other programs.
- NOTE: By choosing the wrong template in your scenario can lead you to
change your current configuration, but because you're going to analyse it
first then (If you want) you can apply those changes to your current
configuration, but note that action will change your existent configuration,
So be carefull with the RED Xs meaning that the template that you're
analysing has a different settings from the existing ones.
- In the left pane, right-click Security Configuration and Analysis, and
then click Analyze Computer Now.
- Now you can look at the existing configuration against your actual
configuration, you can also add the Remote Users to the "Allow logon through
Terminal Services".
- If you are certain that these settings are the settings that you want to
configure, then just Right-click Security Configuration and Analysis in the
left pane, and then click Configure Computer Now.

[ajoaosilva]

The "Remote Desktop Group" members can't logon either.

[ajoaosilva]

It's incredible but it's true! The user right was always there, right under
my nose, but with a diferente name!
Microsoft translated the "Allow logon through Terminal Services" option, not
as "Iniciar sessão através de servidor de terminais" as it should, but, at
least in portuguese W2K3, as "Impedir o fim de sessão através dos 'Serviços
de terminal'", whose correct translation is "Deny logoff through Terminal
Services"!!!

I activated the right and everything started to work!!

Now, the point is: is this a portuguese W2K3 problem or was i the first to
configure such an OS?
I'll open a new thread do make this situation public and to find out if it
occurs in other OS'.

Although with out a great result, i hereby thank you to all who gave their
opinion in trying to solve this situation.

[angelcruzin]

i got the same problem in yours but i did fix it.

try to go to the Terminal Services Configuration then connections then RDP-Tcp Properties. go to "permissions" tab then add the group or user that you wanted to have access in RD.

Hope this could be help you out. i am just a junior/rokie in network administration

[Robert L [MVP - Networking]]

Thank you for sharing your experience with us. You can use group policy too. This link give more details.

You must be granted the allow log on through TSAssign the user to The Allow log on through Terminal Services right using local policy (gpedit.msc). Assign permission to use TS Configuration. ...


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"angelcruzin" <angelcruzin.2uqgbf@DoNotSpam.com> wrote in message news:angelcruzin.2uqgbf@DoNotSpam.com...

i got the same problem in yours but i did fix it.

try to go to the Terminal Services Configuration then connections then
RDP-Tcp Properties. go to "permissions" tab then add the group or user
that you wanted to have access in RD.

Hope this could be help you out. i am just a junior/rokie in network
administration