Skip to Content.
Sympa Menu

internetworkers - Re: [internetworkers] Windows / Active Directory help needed

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: Tom Caswell <derpimpkar AT yahoo.com>
  • To: "Internetworkers: http://www.ibiblio.org/internetworkers/" <internetworkers AT lists.ibiblio.org>
  • Subject: Re: [internetworkers] Windows / Active Directory help needed
  • Date: Wed, 10 Jun 2009 19:16:23 -0700 (PDT)

I'm bad at AD but I hit a problem like this for a test scenario.  These are the things I'd check:
 
1. I think domain controllers need to have RDC enabled explicitly.
2. I think a user RDCing into a domain controller needs to be a domain admin.  You'll want to double check.
3. You may want to check to see if you're making changes to a local user and not a domain user.  I ate this one for awhile.
 
Tom


From: John Berninger <john AT ncphotography.com>
To: Internetworkers: http://www.ibiblio.org/internetworkers/ <internetworkers AT lists.ibiblio.org>; Triangle Linux Users Group General Discussion <trilug AT trilug.org>
Sent: Wednesday, June 10, 2009 10:45:42 AM
Subject: [internetworkers] Windows / Active Directory help needed

Apologies in advance for any duplicates as a result of cross-posting to
internetworkers and trilug.

I'm a Linux guy, and I'm having to figure out how to make AD in Win2k3
work.  So far, I've gotten far enough to have the domain up and running,
users are being authenticated properly, I can add computers to the
domain, etc...

What I can't do is figure out how to allow a given user (let's call the
user "joe") to RDP into a member server without giving joe Domain Admin
rights.  I have added joe to the Remote Desktop Users group in AD
(DOMAIN/Builtin), I have moved the computer to a new OU and given that
OU a Group Policy that gives Remote Desktop Operators the following privs:
- Allow log on on Locally
- Access this computer from the network
- Allow log on through Terminal Services

What am I missing?

--
John

Dovei'andi se tovya sagain.

---
Come and play at the InterNetWorkers Web site!  http://www.ibiblio.org/internetworkers/
You are currently subscribed to InterNetWorkers mailing list
To unsubscribe visit http://lists.ibiblio.org/mailman/listinfo/internetworkers




Archive powered by MHonArc 2.6.24.

Top of Page