terminal server

[IanT]

just came across this while logging onto a DC........

 

To log onto this remote computer, you must be granted the Allow Log on through Terminal Services Right....etc.

 

Never had this and im logging on as a admin!!!!

[tmcd35]

Admins are automatically given the 'allow log via terminal services' rights. You have to explicitely give other users those rights in the servers local security policies. For more than 2 concurrent logon's you need a TS licensing server and enough licenses registered to cover the number of concurrent logons you require.

[IanT]

I am trying to log on to this DC as a admin but still not letting me at all

[tmcd35]

Have you changed any security settings recently or disabled remote logon on the server? Are you login on as 'Administrator' or a member of 'Domain Admins'?

[IanT]

The account I'm trying to log in with is a admin account, no changes have been made, I get to the login screen, put in un and pw and I get that error with every account I try!!!!

[tmcd35]

Are you able to logon to the server locally? Also have you tried the actual 'Administrator' account rather than a member of 'Domain Admins'?

 

If you can logon locally check the Remote tab under System Properties. I think you can add logon rights in their, double check the 'Domain Admins' group is listed. Also check in 'Administrative Tools\Local Security Policy\Local\User Rights\Allow Logon Through Terminal Services'.

 

Might also be worth double checking that setting in the Domain GPO and the DC's GPO in AD Computers Policies just incase there's a conflict there.

[IanT]

This is a domain controller so I cant get on locally, cant get onto the box at all.

 

(not holding any fsmo)

[FN-GM]

This is a domain controller so I cant get on locally, cant get onto the box at all.

 

(not holding any fsmo)

 

Can you logon to the console interactively?

[IanT]

I'll check tomorrow morning now!! Edited February 2, 2010 by IanT