Terminal services won't allow user login to 2003 Server

[edlcsre]

Hi there,

Was asked by a colleague of mine to look into an issue whereby it was not possible for a domain user to login to a Windows 2003 terminal server using RDP. There is a requirement for a single user to be allowed to log on, but ideally without having to grant admin rights to the machine.

I was able to eliminate the server itself as the problem, as it is possible to log into the console of the server using the user's id, and so it appears to be terminal services which is the issue. I've checked the permissions to login via Terminal Services Manager, and the user has been granted the correct rights for this to work, but yet they are still not able to connect. The error message states that 'in order to remote console to this server you need to have local admin rights on the machine' or words to that effect.

Windows2003 server, no SP in place, everything else is working fine.

Anyone seen this problem before, and have any ideas how it can be resolved?

Many thanks for any pointers....

Cheers,

Chris

 

[llevon]

On the Windows 2003 Server:

Start > All Programs >Administrative Tools > Terminal Sevrices Configuration

Highlight Conections in the left hand window

right click on RDP-TCP in the right hand window

select properties from the menu

click on the tab permissions

add your user in here


Regards,

llevon