Win2003 Server & Terminal Services Issue 1

[BLOWE]

I was using the 120 day grace period for the Terminal Services on our new Windows 2003 Server Standard Edition with no problems (could use the Remote Administration with no problems).
Now that the 120 grace period has expired, can not get Terminal Services to work for this particular Server.
Have purchased and install our 5 TS-Cal Licenses per M$ instructions and it is activated.
But I am still getting this error:

To Log On to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or antoher group that has these permissions, or if the Remote Desktop Users group does not have these permissions, you must be granted these permissions manually.

I have added in my user ID to the Remote Desktop Users group and still am getting the same error.

Where do I look next?
Thanks
Brian
In IOWA

 

[markdmac]

Is the TS a DC? Did you override license server discovery?

I hope you find this post helpful.

Regards,

Mark

 

[BLOWE]

This TS is not a Domain Controller.

I checked the registry settings and the license server discovery is already setup in the registry settings like the MS KB says is should be for overriding the license server discovery.

Is that the issue (it not being a DC)?

 

[markdmac]

No, not an issue so long as you have done the override.

You probably at this point should take a look at the security template on the server and specifically add Log On Via Termianl Services to the user group you need to log on. That should resolve the issue.

I hope you find this post helpful.

Regards,

Mark

 

[BLOWE]

Where do I look for/find the security template and add the 'Log On Via Terminal Services'?

Is this in the local security on the Terminal Server Machine? or on the Domain Controller server?

 

[markdmac]

local.
Easiest way for you do configure it is;

click Start
click Run
Type MMC <enter>
clcik File
click Add/Remove Snap In
Click Add
Highlight Group Policy
Click Add
Click Finish
Click Close

Expand out:
Computer Configuration
Windows Settings
Security Settings
Local Policies
User Rights

Click on User Rights. In the right hand side you will see Access This Computer from the Network. Add your users in there. You will also see Allow Logon through Terminal Services. Add your users in there too.






I hope you find this post helpful.

Regards,

Mark

 

[BLOWE]

That did it. Had to add the users to the Access This Computer from the Network......They were already in the Allow Logon throught Terminal Services.

Thanks so much for the help.
Brian
In IOWA