Remote desktop on domain: The local policy of this system ..

I tried posting this earlier...but it didn't seem to post.

Hello,
I've recently set up a domain controller and domain, but cannot logon
to any of the domain accounts via. remote desktop. I've taken the
following steps:

1) Setup and created domain, users etc. (Windows Server 2003 Standard,
Active Directory)
2) Added the users I want remote desktop for to the Remote Users
group.
3) Set Allow log on locally and Allow log on through Terminal Services
to include this group from the "Default Domain Security Settings"
configuration.
4) Set Deny log on locally / Terminal Services to not have anyone
included.
4) Forced a refresh of the domain.

When I try to log on to the workstation, a local account succeeds, but
a domain account fails. I can't add domain accounts to the remote
desktop users group on the workstation, so I don't know what I'm
missing.

Can someone please help me!?

Thanks,
Chris

Chris wrote:
> I've recently set up a domain controller and domain, but cannot
> logon to any of the domain accounts via. remote desktop. I've
> taken the following steps:
>
> 1) Setup and created domain, users etc. (Windows Server 2003
> Standard, Active Directory)
> 2) Added the users I want remote desktop for to the Remote Users
> group.
> 3) Set Allow log on locally and Allow log on through Terminal
> Services to include this group from the "Default Domain Security
> Settings" configuration.
> 4) Set Deny log on locally / Terminal Services to not have anyone
> included.
> 4) Forced a refresh of the domain.
>
> When I try to log on to the workstation, a local account succeeds,
> but a domain account fails. I can't add domain accounts to the
> remote desktop users group on the workstation, so I don't know what
> I'm missing.
>
> Can someone please help me!?

Chris wrote:
> I tried posting this earlier...but it didn't seem to post.
>
> I've recently set up a domain controller and domain, but cannot
> logon to any of the domain accounts via. remote desktop. I've
> taken the following steps:
>
> 1) Setup and created domain, users etc. (Windows Server 2003
> Standard, Active Directory)
> 2) Added the users I want remote desktop for to the Remote Users
> group.
> 3) Set Allow log on locally and Allow log on through Terminal
> Services to include this group from the "Default Domain Security
> Settings" configuration.
> 4) Set Deny log on locally / Terminal Services to not have anyone
> included.
> 4) Forced a refresh of the domain.
>
> When I try to log on to the workstation, a local account succeeds,
> but a domain account fails. I can't add domain accounts to the
> remote desktop users group on the workstation, so I don't know what
> I'm missing.
>
> Can someone please help me!?

GPRESULT shows your policies are being enforced and looking at a local
machine in question (Compute Management) shows that the proper DOMAIN users
are in the Remote Desktop Users local group?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html