The user account is not authorized for remote login and all policies are in place.

-

hi guys,

ive got strange problem , second time ive encountered this.

the thing cant connect server rdp client. gives me warning user account not authorized remote login.

client:workstation windows 7 64 bit , server: windows 2012 r2

im using following group policy enable local admin rights , rdp rights:

policies\windows\settings\security settings\local policies/user rights assignment

allow log on through terminal services
xxxx\g-bp-localserveradmin-remotedesktop, xxxx\domain admins, xxxx\administrator


restricted groups

group members  member of
xxxx\g-bp-localserveradmin-remotedesktop  builtin\remote desktop users, builtin\administrators


administrative templates\network/network connections/windows firewall/domain profile
windows firewall: allow inbound remote desktop exceptions           enabled 


windows components/remote desktop services/remote desktop session host/connections
allow users connect remotely using remote desktop services       enabled 

windows components/remote desktop services/remote desktop session host/security
not allow local administrators customize permissions               enabled 
require user authentication remote connections using network level authentication            enabled

the weird thing account error. other account working fine. same group rights etc,

with account on other servers functions fine same policy (copy different servers).

when in server , @ properties stated user has access. im member of "g-bp-localserveradmin-remotedesktop" group , can login localy on server (via console access).

when add account directly in administrators group or in remote desktop users group i can login rdp.

does has idea coming from? don't want add users directly groups.

greets vincent

hi vincent,

is server domain controller or domain member server?

please run gpresult.exe on server clear view allow log on through terminal services setting, since not gpo settings applied due precedence , security filtering.

please note if have modified policy setting allow log on through terminal service, we need add both administrators , remote desktop users groups avoid unintended results.

here related blog below should useful you:

“allow logon through terminal services” group policy , “remote desktop users” group
http://blogs.technet.com/b/askperf/archive/2011/09/09/allow-logon-through-terminal-services-group-policy-and-remote-desktop-users-group.aspx
 
best regards,
amy

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Windows Server 2012 General



Comments

Post a Comment

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

-
hello, i'm getting error when trying add print services role in windows 2012 standard. i'm getting same error whether use gui or powershell. this new server install. the powershell error follows: add-windowsfeature : request add or remove features on specified server failed. installation of 1 or more roles, role services, or features failed. the referenced assembly not found. error: 0x80073701 at line:1 char:1 + add-windowsfeature print-services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : invalidoperation: (@{vhd=; credent...name=localhost}:psobject) [install-windowsfeature],     exception     + fullyqualifiederrorid : dismapi_error__failed_to_enable_updates,microsoft.windows.servermanager.commands.addwind    owsfeaturecommand success restart needed exit code      feature result ------- -------------- ---------      -------------- false   no             failed         {} issue appreciated. hi, i think should st
Read more

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

-
i've been trying disconnect server while , haven't been able to. there quick way this? i've used net session , net user , work sometime never consistent. can task? hi yrusad, thanks post. does work when check “computer management > system tools > shared folders > open files/sessions”. directly manage from gui. and based on knowledge, quick way mentioned net session /delete /y. mean never consistent? best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Windows Server 2012 General
Read more

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

-
hi guys, i need event ids. event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages. event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do. if give tips , answers, great. in advance. hi, event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? i assume these
Read more