Trying to setup remote desktop, not working

[glassvial]

So here's the situation, Windows Server 2003, trying to setup a user account for remote desktop. I've added the user under "Select Remote Users" and the user account is a member of the Remote User group, yet still cannot logon saying something about terminal services rights, which the Remote User group is supposed to have enabled by default.

The second half of my problem is once I get this user working, they need to have very restricted access to the machine, only able to run 1-2 programs, sign off, and that's IT. Would appreciate suggestions for an easy way to implement this.

TIA

 

[glassvial]

Anybody?

 

[SolMiester]

Okay, you want to run TS on the 2003 server using RDP client!, correct?, Terminal services have to be installed on the server 1st, the connection manager needs permissions for which ever user group and licencing per user, rather than device should get you sorted.

Edit: just user 'user setting' group policies to lock down the server

 

[glassvial]

We're using remote desktop. We can already login with an administrator account just fine, but trying to connect with a limited user account is proving troublesome.

 

[RebateMonger]

Frankly, I don't use straight Server 2003 much. But I wouldn't be surprised if it denies Remote Desktop access to non-Administrators by default. Certainly if it's a Domain Controller, I'd guess that Remote Desktop is denied to non-Administrators. You should be able to change this using Local Policy or Group Policy if it's a Domain Controller. But there's a reason why it's denied. Allowing direct access to a DC is risky.

Remote Desktop on Windows Server is designed for administrative purposes. For non-administrative use, you normally install the Terminal Server component and pay the $100/user TS license CAL fees.

 

[Astray]

What you're looking for should be in your Local Security Settings under Local Policies -> User Rights Assignment.

I'm not exactly sure what it's labeled but It shouldn't be too hard to find. You can find the Local Security Settings in the control panel under Administrative Tools.

 

[glassvial]

Originally posted by: Astray
What you're looking for should be in your Local Security Settings under Local Policies -> User Rights Assignment.

I'm not exactly sure what it's labeled but It shouldn't be too hard to find. You can find the Local Security Settings in the control panel under Administrative Tools.

Yeah I tried adding the user to "Allow log on through terminal services" and it still doesn't work, says I need to add the user to the allow logon through terminal services, which doesn't make sense to me.

 

[glassvial]

And yes this is a domain controller, but in a very small office and they only need 1 remote user who will only be logged on a few times a week.

 

[glassvial]

Any other suggestions?