Remote Desktop Login Problems

[s|acker-x]

Well I just started working for a company that has no IT guy and well looks like I get to do a lot of fixing what the last guy did wrong.

I'm trying to get Remote Desktop to work on the XP machines that we have. The error I'm getting is "The local policy of this system does not permit you to logon interactively." I have done some basic research on this and we are on a Domain and I have verified that the Domain Controller policy states "Allow to Logon Locally" and I've added the local user as well as the Domain User to the "Allowed Users" in the Remote Desktop settings. The users themselves are simply Domain Users and I'm guessing that they're using the default settings. Its not my main job with the company so this is sort of a side job for me right now.

 

[phr0ze]

I have verified that the Domain Controller policy states "Allow to Logon Locally"

Dont you want 'Allow to Logon Remotely'?

 

[dbwillis]

" have verified that the Domain Controller policy states "Allow to Logon Locally"

You want the users to log onto the domain controller ?


You have to enable the remote desktop on the workstation, then put the domain account in the local group "Remote Desktop Users" or add there domain account in the remote desktop tab of My Computer

 

[s|acker-x]

" have verified that the Domain Controller policy states "Allow to Logon Locally"

You want the users to log onto the domain controller ?


You have to enable the remote desktop on the workstation, then put the domain account in the local group "Remote Desktop Users" or add there domain account in the remote desktop tab of My Computer

I have enabled Remote Desktop and I've added the users I want to have access to the machines onto the "allowed users" section and I still get the error message. I've added their local machine accounts as well as their domain accounts.

 

[JayAre]

You problem lies in the Group Policy.

It's under:
- Computer Config
- Security Settings
- Local Policies
- User Rights Assignments
- Deny Logon on Locally & Deny Logon through Terminal Services

 

[s|acker-x]

You problem lies in the Group Policy.

It's under:
- Computer Config
- Security Settings
- Local Policies
- User Rights Assignments
- Deny Logon on Locally & Deny Logon through Terminal Services

Currently there are no users in the Deny Logon through Terminal Services and only guest is in Deny Logon Locally.

 

[jonw757]

did you check your domain user properties? Under Terminal Services there is a check box that if not checked will prevent you from logging in.

 

[MavsX]

what about are the two boxes checked when your right click my computer, remote tab. Do this one the workstations you want to remote into. make sure both remote from and remote to are checked!

 

[SJConsultant]

You problem lies in the Group Policy.

Agreed.

Currently there are no users in the Deny Logon through Terminal Services and only guest is in Deny Logon Locally.

Are you sure your looking at the correct group policy? Active Directory domains can have multiple GPOs. Explicit deny in a different GPO would override any settings your changing in a different GPO.

Which brings me to my question. What GPO are you modifying? Default domain policy?

 

[JayAre]

Currently there are no users in the Deny Logon through Terminal Services and only guest is in Deny Logon Locally.

Which Group Policy are you looking at? The Domain Policy on your server (i.e. W2k3) or are you looking at the local group policy on the desktop/laptop computer?

 

[oakfan52]

The user trying to logon to the XP machine a local admin? If not they need to be a member of the Remote Desktop Users group(local group to that machine).

 

[s|acker-x]

Right now I'm changing the default GPO and I'm checking the permission on the machine itself to verify what policy this machine has. Its a real pain in the ass right now as I'm at a remote site and someone just disabled the VNC access I had. I'm going to work on getting that back.