Announcement

Collapse
No announcement yet.

getting access denied when RDP in 2003 server as admin

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • getting access denied when RDP in 2003 server as admin

    any ideas? nothing has changed, just not being allowed to remote desktop in to a 2003 fileserver as administrator

  • #2
    And what does event log says about it ?
    Guy Teverovsky
    "Smith & Wesson - the original point and click interface"

    Comment


    • #3
      Logon rejected for WGTNCTNET\Administrator. Unable to obtain Terminal Server User Configuration.
      Error: Access is denied.

      event ID 1219

      Comment


      • #4
        Lots of hints on eventid.net: http://www.eventid.net/display.asp?e...on&phase=1

        Comment


        • #5
          Hi Mate,

          I am presuming you can logon via the console ??

          Is the fileserver part of an AD domain ? If so does the user have the "Allow logon through TS" checkbox ticked in the account proerties ?

          Also check the Local Security policy for the server, under

          Local Policies | User Rights Assignement | Allow Logon through TS

          Ensure the user or a group the user is a member of has this user right

          Topper
          * Shamelessly mentioning "Don't forget to add reputation!"

          Comment


          • #6
            hi topper

            -can log in via console
            -File server is part of AD domain, and user does have checked box for allow logon via TS
            - check local sec policy and it is enabled for allow logon through TS
            - user does have the rights, am going in under admin, and all rights sweet for RDP

            weird problem. Can log into all other machines, other fileservers, DC's, secoundary DC's backup servers etc

            Was thinking there might possibly be something i'm missing in local security policy?

            Comment


            • #7
              Check to see if the administrator is in the Remote Desktop Users built-in group.
              Cheers,

              Daniel Petri
              Microsoft Most Valuable Professional - Active Directory Directory Services
              MCSA/E, MCTS, MCITP, MCT

              Comment


              • #8
                yip
                checked this, and correct users in the built in RDP users group

                Comment


                • #9
                  Try explicitly granting "Create global objects" User Right to the accounts in question (either local sec policy or GPO).
                  Guy Teverovsky
                  "Smith & Wesson - the original point and click interface"

                  Comment


                  • #10
                    that fixed it ,

                    cheers guyt, and the rest of yas

                    Comment


                    • #11
                      Originally posted by guyt
                      Try explicitly granting "Create global objects" User Right to the accounts in question (either local sec policy or GPO).
                      Where on earth did you get that one from, my God???!!!
                      Cheers,

                      Daniel Petri
                      Microsoft Most Valuable Professional - Active Directory Directory Services
                      MCSA/E, MCTS, MCITP, MCT

                      Comment


                      • #12
                        Originally posted by danielp
                        Where on earth did you get that one from, my God???!!!
                        Too many hours debugging GPOs
                        Guy Teverovsky
                        "Smith & Wesson - the original point and click interface"

                        Comment

                        Working...
                        X