+ Post New Thread
Results 1 to 4 of 4
Windows Server 2008 R2 Thread, RDP - Access Denied in Technical; Hello, I have a user that needs to RDP to one of our Windows 2008 R2 servers, but everytime they ...
  1. #1

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15

    RDP - Access Denied

    Hello,

    I have a user that needs to RDP to one of our Windows 2008 R2 servers, but everytime they try, they receive a message simply saying "Access Denied".

    Checking the event log on the server doesn't show any particular alerts that relate.

    The user is in a group that allows logon locally, remote desktop users, logon through terminal services. We have other people in the same groups and they can successfully logon.

    The issue seems to somewhat relate to profiles. The user has a profile usernameRDS.v2 for which they have full control over. On the server there is an environment variable that converts %osver% to RDS

    Within ADUC the profile path points to username%osver%.

    I have ensured the user has full control over both of these folders, still no joy. I deleted the RDS folder in the hope this will be created when the user logs on...no joy.

    However, if I totally remove the profile path from ADUC...then the user can successfully RDP the server.

    Anyone else come across this?

  2. #2

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    Can you try deleting the local profiles on the client, server and give the user a new profile (romaing/mandatory whatever you use)

  3. #3

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15
    Tried all that :-(

    We are now looking at creating a new account for the person having trouble

  4. #4

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15
    Ok looks like we found the issue....this turned out to be due to "Token Bloat" with the need to increase the MaxTokenSize.

    MaxTokenSize and Kerberos Token Bloat - Just Blog&#39n - Site Home - TechNet Blogs

    This is normally caused by being a member of too many groups. Not sure how the profile path related in anyway, but by increasing the Token size, rebooting the server, the "Access Denied" error went away

    Hope others might find this useful

SHARE:
+ Post New Thread

Similar Threads

  1. Photostory Access denied error.
    By ICT_GUY in forum Windows
    Replies: 20
    Last Post: 10th February 2010, 11:03 AM
  2. Censornet Access Denied Page Edit
    By HallX in forum *nix
    Replies: 4
    Last Post: 12th March 2007, 09:05 AM
  3. Replies: 2
    Last Post: 13th June 2006, 09:22 PM
  4. Access Denied from Admin Network
    By MrDylan in forum ICT KS3 SATS Tests
    Replies: 9
    Last Post: 25th April 2006, 12:09 PM
  5. GPMC "Access Denied" for Administrator
    By Gatt in forum Windows
    Replies: 9
    Last Post: 8th February 2006, 06:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •