Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)
We have XP workstations running on an NT domain. We have a PC set up
for users to use when they need to run a particular piece of software
that we only have one licence for, they have a shortcut to an .rdp
file on their desktops that connects them via remote desktop to the PC
where they logon with their standard NT logon.
On our PCs the standard setup for Remote Desktop is to allow the
Domain Administrators group and a global group called Remote Desktop
to logon through a connection, all other groups are denied (not
specifically but not allowing in this case denies)
On this particular PC the global group that uses the PC is added to
the allowed users. This has been working fine for a couple of months.
However I now have one user that can't get logged on, she gets 'Your
interactive logon privilege has been disabled' I have checked the
account and the PC; she is still in the group and the group still has
permissions.
Creating a copy of her account (within NT user Manager) for testing
revealed that this copy account also has the same problem. A fresh
account set up with the same global groups etc does not suffer from
this problem. Also a copy of another user's account within the same
department does not suffer.
I have also tried adding individual permission for the user to log
onto the PC and putting her in the global Remote Desktop group and
testing connecting to another PC with no joy.
The problem looks to be with the user's account but is not in any of
the settings configurable from User Manager. Now I am a bit stumped. I
am loath to delete and recreate her account as it would be a lot of
work changing permissions on all her stuff to allow for the new SID,
plus she has a laptop with a local profile.
Does anyone have any ideas?
Tim
We have XP workstations running on an NT domain. We have a PC set up
for users to use when they need to run a particular piece of software
that we only have one licence for, they have a shortcut to an .rdp
file on their desktops that connects them via remote desktop to the PC
where they logon with their standard NT logon.
On our PCs the standard setup for Remote Desktop is to allow the
Domain Administrators group and a global group called Remote Desktop
to logon through a connection, all other groups are denied (not
specifically but not allowing in this case denies)
On this particular PC the global group that uses the PC is added to
the allowed users. This has been working fine for a couple of months.
However I now have one user that can't get logged on, she gets 'Your
interactive logon privilege has been disabled' I have checked the
account and the PC; she is still in the group and the group still has
permissions.
Creating a copy of her account (within NT user Manager) for testing
revealed that this copy account also has the same problem. A fresh
account set up with the same global groups etc does not suffer from
this problem. Also a copy of another user's account within the same
department does not suffer.
I have also tried adding individual permission for the user to log
onto the PC and putting her in the global Remote Desktop group and
testing connecting to another PC with no joy.
The problem looks to be with the user's account but is not in any of
the settings configurable from User Manager. Now I am a bit stumped. I
am loath to delete and recreate her account as it would be a lot of
work changing permissions on all her stuff to allow for the new SID,
plus she has a laptop with a local profile.
Does anyone have any ideas?
Tim
Facebook
Twitter
Instagram