Users can RDC to the SBS but administrators

	Home \| Site Map \| How To \| Windows Vista \| Case Studies \| Articles \| Forums \| Services \| Donations \| Careers \| About Us \| Contact Us\|

Users can RDC to a DC but administrators - Case Study

Situation: The company is running Windows SBS 2003 and allow some consultants to access the server using Remote Desktop. However, the administrator or member of the administrators can't access the server using Remote Desktop. When they use administrator ID to logon, they receive this message: "To log on this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User Group does not have this right, you must be granted this right manually."

Troubleshooting:

1. Verify the administrators listed in Access this computer from the network under Domain Controller Policy.

2. Verify the administrators listed in Allow log on locally from the network under Domain Controller Policy.

3. Verify the administrators have the permissions to access the Terminal server.

4. We find the Allow log on through Terminal Services lists Consultants (group) only (no administrators).

Analysis and resolution: It seems to me that they wanted to allow the consultants to access the DC. They enabled Allow log on through Terminal Services and added consultants group but not Administrators group. Therefore, the consultants can't but administrator. Adding the Administrators group to the Allow log on through Terminal Services fix the problem.