Yes this has been granted. The point I am trying to make is they can connect and logon through Terminal Services using an Terminal Services RDP session, but not to the console, which they can do if they are a Domain Admin
Thanks Stephen Stephen Wilkinson Tel +44(0)207 4759276 Mobile +44(0)7973 143970 E-Mail: [EMAIL PROTECTED] -----Original Message----- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: 02 July 2003 15:25 To: [EMAIL PROTECTED] Stephen- On the DCs, have you tried granting the "Allow Logon through Terminal Services" user right to your non-admin group? -----Original Message----- From: Wilkinson, Stephen (DrKW) [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 02, 2003 6:25 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] OT perhaps.. Connecting non-admin to remote console in Win2k3 DCs We are having trouble connecting non-admin users to the remote console session on our DCs. They have the correct logon locally privilege and we have permissioned the RDP session int Terminal Services ok so non-admins (if they are in the relevant group) can connect to the DC via a terminal session ok, but if we try to connect to the remote console session (run "mstsc /console") from an XP workstation they get "you do not have access to logon to this session" Have done the usal KB and google search, but nothing seems to suggest there is a difference in the permissions between terminal session and remote console session to a Windows 2003 DC Anyone help? Thanks in advance Stephen Wilkinson Tel +44(0)207 4759276 Mobile +44(0)7973 143970 E-Mail: [EMAIL PROTECTED] ---------------------------------------------------------------------- If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.drkw.com/disc/email/ or contact the sender. ---------------------------------------------------------------------- List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ---------------------------------------------------------------------- If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.drkw.com/disc/email/ or contact the sender. ---------------------------------------------------------------------- List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/