Hi Mark, What exactly do you want to achieve? (requirements)
The following possibilities are available: * On a W2K3 server (non-dc) the "Administrators" and the "Remote Desktop Users" by default have permissions to use RDP * On a W2K3 DC only the "Administrators" by default has permissions to use RDP * Create a custom group and assign that group the permission to log to through RDP It is not desirable though to let a "simple user" logon to a DC. Only configure direct access (physical or logon) for persons or admins you trust 1000%! If I were you I wouldn't let a simple user logon to a DC. What's so important on that DC for that user? Regards, Jorge -----Original Message----- From: [EMAIL PROTECTED] To: Active Directory Mailing List Sent: 11/29/2004 5:43 PM Subject: [ActiveDir] Can't log on interactively I can't seem to log on as the user when I connect using Remote Desktop, and I remember changing a policy once to allow this on one of my domain controller. However, I remember it causing the user problem after that logging onto their respective domain. What is the best way to accomplish this task without screwing anything up? Mark Orlando Systems Administrator I.T. Department Linden Public Schools List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
