none
can not login windows 2003 by mstsc RRS feed

答案

  • Dear Customer,

     

    Based on my research and experiences, the issue is generally caused by incorrect user rights assignment. I suggest we perform the followings to troubleshoot the issue:

    1. Time synch issue may cause Kerberos authentication failure. Make sure the time of the remote server is properly synchronized with the domain controller.

    2. Check user rights assignment settings:
    -----------------------
    a. Click Start->Administrative Tools-> Active Directory Users and Computers.
    d. Right click the OU where the problematic server resides and then click Properties.
    c. Either create a new GPO or edit an existing GPO.
    d. Go to [Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignments]
    e. On the right pane, double click "Access this computer from the network", ensure "Everyone" and "Authenticated Users" groups are listed here.
    f. Double click "Deny access to this computer from the network", ensure the users that need to access the server remotely are NOT listed here.
    g. Run gpudate /force to refresh the policy.

    If you have any questions or concerns, please feel free to let me know. I will be glad to help.

    Please let me know the results at your earliest convenience. If you have any concerns on the above, please feel free to post back and I am happy to answer any of your questions.


    Best regards,

     

    Tom Zhang

     

    2008年12月2日 9:44
    版主

全部回复

  • Maybe  caused by account have no enough authority!The information said just it!Please give more information detail about this problem!  

    2008年12月1日 3:50
  • hi, thanks for your reply.

    But I try to login the system with the domain administrator.

    It seems not cause by the authorization problem.

    Thanks.

    2008年12月1日 5:09
  • Are you sure the server have a logging when you are logging on the server by mstsc?

     

    2008年12月1日 6:17
  • Dear Customer,

     

    Based on my research and experiences, the issue is generally caused by incorrect user rights assignment. I suggest we perform the followings to troubleshoot the issue:

    1. Time synch issue may cause Kerberos authentication failure. Make sure the time of the remote server is properly synchronized with the domain controller.

    2. Check user rights assignment settings:
    -----------------------
    a. Click Start->Administrative Tools-> Active Directory Users and Computers.
    d. Right click the OU where the problematic server resides and then click Properties.
    c. Either create a new GPO or edit an existing GPO.
    d. Go to [Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignments]
    e. On the right pane, double click "Access this computer from the network", ensure "Everyone" and "Authenticated Users" groups are listed here.
    f. Double click "Deny access to this computer from the network", ensure the users that need to access the server remotely are NOT listed here.
    g. Run gpudate /force to refresh the policy.

    If you have any questions or concerns, please feel free to let me know. I will be glad to help.

    Please let me know the results at your earliest convenience. If you have any concerns on the above, please feel free to post back and I am happy to answer any of your questions.


    Best regards,

     

    Tom Zhang

     

    2008年12月2日 9:44
    版主
  •  

    Dear Tom:

     

    Thanks for your reply.

    I also checked it following your suggection.

    But it also has not been solved.

    I guess it about the license server of termical service have expried.

    ...

    BR,

    Randy 

    2008年12月4日 8:49
  • Dear Customer,


    For assistance with licensing issues, I suggest that you contact the licensing team directly at 23889600 to speak directly to a Microsoft licensing specialist.

    Thank you for your understanding.

    Sincerely


    Tom Zhang

     

    2008年12月5日 9:41
    版主