New AD users can not use Terminal Services

[melbert2002]

Hello all. Im having a problem with creating new users in Active directory. The problem is that when ever I create a new user and give it Remote Desktop permissions or even Administrator permissions I still cant get the user to use Terminal Services/Remote Desktop. I get an error stating something like "to log into this computer the user must have Remote desktop permissions", which I have given them. The older users can login just fine, Ive even copied a user that can, but no luck. Is there something going on here, too many users in the domain maybe. There are only like 50 users. So if anybody knows whats going on here.....

Thanks

Mel

 

[tfg13]

The question is going to be what do the terminal servers have as far as login rights? Do they have the domain "remote users" able to terminal service, or do they have the "local remote users"? The easiest way to find out is from one of the terminal servers, look at the "remote desktop" group from user manager. If the domain remote users group is not there, you know where the problem is, and just add the domain access group. You can also check the "user rights" settings in group policy.

 

[Teknoratti]

Your terminal server is under the domain so check the gpo and see what rights your terminal server has. I'm sure they're correct since your previous users can connect.

That error is usually if that particular user account is not in the remote desktop user group. Check the permissions on the terminal server to see who is allowed to log in.

The order of precedence and order in which to check is as follows:

1- computer level group policies
2- user level group policies
3- terminal server configurations (RDP-tcp connection settings)
4- user account properties
5- remote desktop client configuration.

 

[melbert2002]

Thanks for the responses. The interesting thing is that the Users have the administrator privilage (dont ask.....) . I have tried adding the remote desktop rights but still no luck. This issue happens only for new users. I have checked the user account, I have checked the Remote desktop properties, and tested it with an account that works. Im pretty confused about this.

Ill keep on looking at some of the other things you have mentioned though.

Thanks

mel