RE: [ActiveDir] Domain Controller Access

[Molkentin, Steve]

Kevin,   Does the user exist in this domain? If not, is there a trust in place between the domain the user exists in and the domain that the DC lives in?   Just some questions, that may be way off mark...  ;)   themolk. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Papula Sent: Friday, 28 October 2005 2:12 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Domain Controller Access Hello everyone: I am running a test domain environment, and I cannot get a normal user the permission to remotely log on to a DC. I am just playing around with permissions, and no matter what, i always get the same error: "you do not have access to logon to this session." I have entered this user into the DCs domain controller security policy, user rights, allow logon through terminal services, and local login. I have entered this user in RDP-TCP permissions, as full control. I have added this user to the GPO under domain controllers in dsa.msc This persons name was already in the list under the DCs system properties, remote, users. prob from the RDP-TCP permission addition. This user is also in the RDP group. I know this user shouldn’t need access to remote into a DC because of the non-admin user state, but this is a test environment, and I am perplexed as to why I am not able to do this. Has anyone else ever come across this? Thanks for any help. -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.361 / Virus Database: 267.12.5/150 - Release Date: 10/27/2005