Best Practices Analyzer keeps saying to add groups/users to RDP Server 2008R@

server 2008r2, rds running, licensed, 20 user cals.....when run best practices analyzer keeps telling me "the remote desktop users group on remote desktop session host server not contain domain users or groups."  keeps telling me add them - there - domain users , group use healthmatics users.....what missing?

thank you

 

hi,

to fix 4105, please follow these instructions (they assume schema 2008 version):

1. logon 2008 r2 dc administrator
2. start--run--adsiedit.msc
3. in left pane, navigate ou your users located
4. in left pane, right-click on cn=<your ou> and choose properties
5. on security tab, click advanced button
6. click add button, type terminal server license servers , click ok
7. on properties tab, select descendant user objects in apply onto box
8. in permissions box, select allow of following:

read mstsexpiredate
write mstsexpiredate
read mstslicenseversion
write mstslicenseversion
read mstsmanagingls
write mstsmanagingls

9. click ok, , click ok again save changes

please test having standard user logon rds.  after user has logged on, check event logs of server, there should not event id 4105 warning user in system log, , there should event id 4143 information entry user under microsoft-windows-terminalservices-licensing/admin log.

the 1012 error means attempted log on server via remote desktop , entered incorrect username/password combination 5 times in row.  normal (user forgot password), or mean somehow trying guess username/passwords of server.

if server exposed directly internet , seeing these 1012 errors recommend change default rdp port different, or implement rd gateway.

thanks.

-tp

Windows Server  >  Remote Desktop Services (Terminal Services)