Re: RD Server on WinXP Pro not working in SB Server Domain?

From: Steven L Umbach (n9rou@attbi.com)
Date: 04/08/03 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Tue, 08 Apr 2003 20:04:22 GMT

     The only other thing I can think of is there is a "remote desktop
users" group on Windows XP machines. Check to see if that the user is a
member of that group. There are also a user rights setting on XP Pro for
"allow logon through Terminal Services" and "deny log on through Terminal
Services" that might be worth checking out. Otherwise you might try posting
in the WindowsXP security newsgroup. -- Steve

"Michael Reipke" <m.reipke@msoft.de> wrote in message
news:039201c2fd8a$a35c3b00$a301280a@phx.gbl...
Hey There!
Unfortunately, I´ve already checked all these
things...Noting seems to be wrong! The settings you
mentioned are all made, nothing is denied explicitly
anywhere. The funny thing is, that exactly the same
config works with a standard Windows 2000 Domain
Controller...*sigh* I found an error message for Windows
2000 that says exactly the same but the error was fixed
in ServicePack 1 for Win2K and the second is, that I´ve
got a WinXP machine here... The XP firewall ist turned
off. Local logon is possible with any domain user, but
NOT via Remote Desktop except the domain administrator.
Even if I put my domain user in the domain admins group,
he can´t log on!!! *sigh* Perhaps anybody has some other
ideas?

thx,
-michael-

>-----Original Message-----
> I don't have a lot of experience with Remote
Desktop but here is my
>two cents since no one else has answered yet - Check
computer
>properties/remote desktop to see who has permissions to
use it. Check
>effective securtiy policy/*/user rights to see who is
allowed to log onto
>computer locally and if anyone is denied local log on.
If XP firewall is
>enabled, disable it to see what happens. Check the user
account properites
>to see if they are allowed to use remote access and to
what extent. ---
>Steve
>
>"Michael Reipke" <m.reipke@msoft.de> wrote in message
>news:02cd01c2fd0c$69ee8770$3301280a@phx.gbl...
>Hey All!
>
>We´ve got a very tricky problem:
>
>A WindowsXP Pro machine with enabled Remote Desktop
Server
>in a SB Server 2000 domain environment.
>
>A client now tries to connect with a domain user account
>(which is enabled to use the service on this machine and
>also has local admin rights) to the WinXP machine. The RD
>Server now says: "You are not allowed anymore to logon
>interactively..:"
>
>The same scenario with a standard Win2000 Server Domain
>works perfectly. The only user who works is the domain
>administrator...
>
>Has anybody any idea?
>
>Thanks,
>Michael
>
>
>
>.
>

Relevant Pages