Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a domain controller and a member server running W2K8 R2 server. TS licensing is on the DC, TServices is on the member server. Unless I make a user a domain admin, they cannot login: they get the message that they have not been granted to the logon right in terminal services, to make sure they are a member of the RDUsers group or grant the right manually.

I have made sure they are a member of the RDUsers group, and I have also tried setting the group policy to allow RDusers to logon through terminal services, but none of it works.

Any other ideas of what I'm doing wrong?

share|improve this question
add comment

2 Answers

For 2008 R2, go to Start -> Administrative Tools -> Remote Desktop Services -> Remote Desktop Session Host Configuration. Under 'Connections', double click on RDP-Tcp. Go to the Security tab and make sure the Remote Desktop Users group is in this list.

share|improve this answer
add comment

The users have to be part of the RDusers group locally on the server you want to login via RDP, not only in the AD. I find this very irritating as well, if someone can provide a workaround for this it would be much appreciated.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.
{"cc_re__cc_re__cc_by_sa_3_0": ["        <li><a href=\"http://area51.stackexchange.com\" title=\"proposing new sites in the Stack Exchange network\">Area 51</a></li>\r\n                        <li><a href=\"http://careers.stackoverflow.com\">Stack Overflow Careers</a></li>\r\n                    \r\n                </ol>\r\n            </td>\r\n    </tr>\r\n</table>\r\n                </div>\r\n            </div>\r\n\r\n            <div id=\"copyright\">\r\n                site design / logo &#169; 2014 stack exchange inc; user contributions licensed under <a href=\"http://creativecommons.org/licenses/by-sa/3.0/\" rel=\"license\">cc by-sa 3.0</a> \r\n                with <a href=\"http://blog.stackoverflow.com/2009/06/attribution-required/\" rel=\"license\">attribution required</a>\r\n            </div>\r\n            <div id=\"svnrev\">\r\n                rev 2014.3.15.1463\r\n            </div>\r\n            \r\n        </div>\r\n    </div>\r\n    <noscript>\r\n        <div id=\"noscript-warning\">Server Fault works best with JavaScript enabled<img src=\"http://pixel.quantserve.com/pixel/p-c1rF4kxgLUzNc.gif\" alt=\"\" class=\"dno\"></div>\r\n    </noscr"], "copyright__copyright__copyright": ["share|improve this answer\nadd comment\n\nThe users have to be part of the RDusers group locally on the server you want to login via RDP, not only in the AD. I find this very irritating as well, if someone can provide a workaround for this it would be much appreciated.\n\nshare|improve this answer\nadd comment\n\nYour Answer\n\n\u00a0\ndiscard\n\nBy posting your answer, you agree to the privacy policy and terms of service.\n\nNot the answer you're looking for? Browse other questions tagged or ask your own question."]}