Setting up a terminal server
OK I've installed Virtual PC and a copy of 2K3 R2 on it. All it's got is Domain controller with active directory, and terminal services installed as roles.
I created a test basic user, added it to the remote desktop users group and tried logging in and get the message
"to log on to this remote computer you must be granted the allow log on through terminal services.......see if user is member of remote desktop users........"
It is, but it refuses to log in. If, however, I go into TS manager, edit the connection and add the user in the permissions tab with full control (remote desktop users dont have full, only modify i believe) and try logging in, it works. I remove it from the permissions so it picks up permissions from remote desktop users, back to square 1. is there something i'm missing in terms of getting a standard user to log on to a terminal services server.
Not sure if this is the correct solution but basically in:
secpol.msc you have user rights assignment. in that is allow log on via terminal services, and in there it only had administrators, so i added remote desktop users and its fine.
if thats just a bodge fix and there is a correct way I'd like to hear it too, just so i know.