Comment from PeteLong
Date: 05/04/2004 11:08AM PDT
Comment
How to give NON administrators Terminal Service (Remote Administration)
This must be done on a server to server level, If you require a lot of users create a GROUP called TSRemoteUsers in active directory and add your users into the group, then carry out the steps below. Ill assume we are only dealing with a couple of users.
Ill also assume you have Terminal Services (Administration Mode) installed and running on the server, if not open control panel >add remove Programs >windows componants >Terminal Services, When Prompted ENSURE "Remote Administration" is selected.
1. Using an admin account open a remote admin session to the server in question.
2. CLick Start >Programs >Administrative Tools >Terminal Services Configuration
3. CLick Connections
4. In the right hand pane RIGHT CLICK the RDP-TCP connector and select properties
5. On the permissions tab click "ADD"
6. Add your user/group in here and select the appropriate level of access.
If it aint working ensure you not in application mode (Unless you have to be!!)
Change Between Remote Administration and Application Server Mode
http://support.microsoft.com/default.aspx?scid=kb;EN-US;238162
Their is a local security policy GPO that limits the ability to log on locally.
It is called "Allow Logon Locally"
Add your group to this GPO for access.
1. Start, Settings, Control Panel, Administrative Settings.
2. Double-click Local Security Policy.
3. Go to Security Settings, Local Policies, User Rights.
4. Double-click Allow Logon Locally in the right hand pane.
5. Click Add, Browse, and double click the user or group you want to add.
6. Click Ok all the way out.
7. Reboot your computer
Hope this helps