LKBEN10747: Only users in Administrators group can log on Citrix Presentation Server / MS Terminalserver


Symptom

Users still can not log on to Terminalserver although "allowed to log on through terminal services"

Cause

Default Domain Group Policy is not configured

Solution

I just ran into this problem - even without Citrix Presentationserver (CPS 4.5) implemented yet:
Testenvironment (Single Domain, W2k3SR2, IE7), almost everything plain out of the box.

There are all the usual break-your-neck with local security "allow log on through terminal services", remote desktop user group and all this stuff, but I still had this error message...

Looking at the (default!) Default Domain Policy in GPMC I found out, remote desktop users are blocked out.
So, also lookup your Default Domain Policy, it lets you select blank passwords, but a user's not allowed to log on over Terminal Services.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.