Hi,We are unable to login to any member Servers and Domain Controllers in the domain using Remote Desktop Connection.Server : Windows Server 2003 32-bit Standard - Domain ControllerMember Servers : Windows Server 2003 32-bit Standard / Windows Server 2003 32-bit Enterprise Windows Server 2003 64-bit StandardWe are getting the following error when a user is trying to access the server which is permitted "Allow Users to connect remotely to this computer" under system properties. By the way, in all servers this permission is enabled.To log on to this remote computer you must be granted the allow log on through terminal services right. By default, members of the remote desktop group have this right. If you are not a member of remote desktop users group or another group that has this right, or if the remote desktop user group does not have this right, you must be granted this right manually.1. All Users are added to Remote Desktop Users Group2. Even the Permission is given to Domain's Remote Desktop Group which contain all domain users at "Allow log in through Terminal Services" option under Domain Group Policy/Computer Configuration/Windows Settings / Local Policies / User Rights Assignment.3. From Intial stage of Domain Creation Only Domain Admins are able to login Please help us.Thankx in Advance.Krishna.email@yourskrishna.com

Hi, It is recommended to use the Remote Desktop Users group to control remote connection permissions for Remote Desktop and Terminal Service. 1. Clear the Group Policies settings that define 'log on through terminal services right' in Computer Configuration--->Windows Settings--->Local Policies--->User Rights Assignment. 2. On the local server, add users and groups in System Properties--->Remote--->Remote Desktop Users. 3. Try to remotely logon to the server. Check how it works.

2. is not sufficient or might not needed. I had to assign "Allow log on through Terminal Services" right for Remote Desktop Users security group in Local Security Policy of the domain controller. On a domain controller only Administrators group has this right by default.