TS LOG IN
in [Terminal Services]
|
Prev: spooler hang. again
Next: TS2003 and ACT 6.0 Crashing
From: Vera Noest [MVP] on 12 Aug 2006 07:04 OK, back to basics, then. I've re-read the threat and didn't find the exact error message that normal users get when they try to connect. Can you post that? _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?QWw=?= <Al(a)discussions.microsoft.com> wrote on 11 aug 2006 in microsoft.public.windows.terminal_services: > Vera, I read that the other day, stil no help but thank u very > much. > > "Vera Noest [MVP]" wrote: > >> Check if this helps: >> >> http://www.eventid.net/display.asp?eventid=537&eventno=194 >> &source=Security&phase=1 >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?QWw=?= <Al(a)discussions.microsoft.com> wrote on 11 aug >> 2006 in microsoft.public.windows.terminal_services: >> >> > I get Event ID error 537 & 578, head over to the MS site and >> > of course no help for my issue. >> > >> > "Patrick Rouse" wrote: >> > >> >> Look in the event log on the TS for reasons why your logon >> >> is being denied. -- >> >> Patrick Rouse >> >> Microsoft MVP - Terminal Server >> >> http://www.sessioncomputing.com >> >> >> >> >> >> "Al" wrote: >> >> >> >> > No it's not my DC, my two DC's are Win2k server >> >> > boxes...also not sure why someone else posted but that's >> >> > not my response. But I still have a log in problem, any >> >> > further help? >> >> > >> >> > Al >> >> > >> >> > >> >> > "Patrick Rouse" wrote: >> >> > >> >> > > Did you happen you make this TS a Domain Controller? If >> >> > > yes, then that's your problem. >> >> > > >> >> > > -- >> >> > > Patrick Rouse >> >> > > Microsoft MVP - Terminal Server >> >> > > http://www.sessioncomputing.com >> >> > > >> >> > > >> >> > > "Al" wrote: >> >> > > >> >> > > > I just installed a new Win2k3 Server and TS, called MS >> >> > > > and entered my 20 CAL's for the TS server. Now I added >> >> > > > my users to Local Users & Groups, Remote Desktop >> >> > > > Users. But I can't log in to the new server via Remote >> >> > > > Desktop at all, neither can my users. Only the >> >> > > > Administrator can. >> >> > > > >> >> > > > I also have a Win2k TS server, properly liscensed in >> >> > > > PER DEVICE, I have another Wink3 TS server, that's >> >> > > > also per USER. the New server is per USER as well but >> >> > > > why can anyone log in via remote desktop...all 3 TS >> >> > > > servers are part of my domain.
From: Al on 15 Aug 2006 10:46 Yes the TS Licensing is installed on my new Win2k3 Server, and my old win2k3 server has it's own licensing, as well as my Win2k Server. 2000 Server - TS CAL Token (per-device) old 2003 server - TS CAL Token (per user cal token) - Temporary Licenses wink3 - TS per Device Cal Token NEW 2003 server - TS Server Per user CAL token I also get this Event ID: 578 Object Server - Security Object handle: -1 Process ID: 2548 Primary user Name (name of my server) myserver$ Primary domain: abc Primary login: (0x0,0x3E7) Client user name: administrator client Domain: abc client logon id: (0x0, 0x15892c9) Privileges: SeIncreaseBasePriorityPriviledge and once I try to log in as myself (not Admin) I get the usual errors of: Error msg 1: The Desktop you are trying to connect is currently available to Admin only. Contact your Admin to confirm that the current settings are in place. Error msg 2: To log on to this computer you must have Terminal Service Access permissions on this computer. By Default blah,blah,blah... But I did place myself and a few other users in the Local user & groups, Remote Desktop User group on the NEW Win2k3 server. Still no luck whatsoever... Al "Patrick Rouse" wrote: > Where is your Terminal Server Licensing Service installed? You know it has > to be on a 2003 server, yes? > > They aren't trying to logon to the console, are they? (i.e. mstsc.exe > /console, or using the remote desktops MMC w/ connect to console). > > -- > Patrick Rouse > Microsoft MVP - Terminal Server > http://www.sessioncomputing.com > > > "Al" wrote: > > > I get Event ID error 537 & 578, head over to the MS site and of course no > > help for my issue. > > > > "Patrick Rouse" wrote: > > > > > Look in the event log on the TS for reasons why your logon is being denied. > > > -- > > > Patrick Rouse > > > Microsoft MVP - Terminal Server > > > http://www.sessioncomputing.com > > > > > > > > > "Al" wrote: > > > > > > > No it's not my DC, my two DC's are Win2k server boxes...also not sure why > > > > someone else posted but that's not my response. But I still have a log in > > > > problem, any further help? > > > > > > > > Al > > > > > > > > > > > > "Patrick Rouse" wrote: > > > > > > > > > Did you happen you make this TS a Domain Controller? If yes, then that's > > > > > your problem. > > > > > > > > > > -- > > > > > Patrick Rouse > > > > > Microsoft MVP - Terminal Server > > > > > http://www.sessioncomputing.com > > > > > > > > > > > > > > > "Al" wrote: > > > > > > > > > > > I just installed a new Win2k3 Server and TS, called MS and entered my 20 > > > > > > CAL's for the TS server. Now I added my users to Local Users & Groups, Remote > > > > > > Desktop Users. But I can't log in to the new server via Remote Desktop at > > > > > > all, neither can my users. Only the Administrator can. > > > > > > > > > > > > I also have a Win2k TS server, properly liscensed in PER DEVICE, I have > > > > > > another Wink3 TS server, that's also per USER. the New server is per USER as > > > > > > well but why can anyone log in via remote desktop...all 3 TS servers are part > > > > > > of my domain. > > > > > > > > > > > > > > > > > >
From: Vera Noest [MVP] on 15 Aug 2006 15:38 Are you running Citrix on top of TS? Error messages: "The desktop you are trying to open is currently available only to administrators", followed by "You do not have access to logon to this session" are caused by Citrix PS on 2003: Installing Citrix PS 3.0 on a Windows 2003 creates a new RDP-TCP listener. The default properties of this listener allow only the launching of published applications. See CTX104106 - Connection Error : The desktop you are trying to open is currently available only to administrators http://knowledgebase.citrix.com/kb/entry.jspa?externalID=CTX104106 _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?QWw=?= <Al(a)discussions.microsoft.com> wrote on 15 aug 2006 in microsoft.public.windows.terminal_services: > Yes the TS Licensing is installed on my new Win2k3 Server, and > my old win2k3 server has it's own licensing, as well as my Win2k > Server. > > 2000 Server - TS CAL Token (per-device) > old 2003 server - TS CAL Token (per user cal token) > - Temporary Licenses wink3 - TS per > Device Cal Token > NEW 2003 server - TS Server Per user CAL token > > I also get this Event ID: 578 > Object Server - Security > Object handle: -1 > Process ID: 2548 > Primary user Name (name of my server) myserver$ > Primary domain: abc > Primary login: (0x0,0x3E7) > Client user name: administrator > client Domain: abc > client logon id: (0x0, 0x15892c9) > Privileges: SeIncreaseBasePriorityPriviledge > > and once I try to log in as myself (not Admin) I get the usual > errors of: > > Error msg 1: > The Desktop you are trying to connect is currently available to > Admin only. Contact your Admin to confirm that the current > settings are in place. > > Error msg 2: > To log on to this computer you must have Terminal Service Access > permissions on this computer. By Default blah,blah,blah... > > But I did place myself and a few other users in the Local user & > groups, Remote Desktop User group on the NEW Win2k3 server. > Still no luck whatsoever... > > Al > > > "Patrick Rouse" wrote: > >> Where is your Terminal Server Licensing Service installed? You >> know it has to be on a 2003 server, yes? >> >> They aren't trying to logon to the console, are they? (i.e. >> mstsc.exe /console, or using the remote desktops MMC w/ connect >> to console). >> >> -- >> Patrick Rouse >> Microsoft MVP - Terminal Server >> http://www.sessioncomputing.com >> >> >> "Al" wrote: >> >> > I get Event ID error 537 & 578, head over to the MS site and >> > of course no help for my issue. >> > >> > "Patrick Rouse" wrote: >> > >> > > Look in the event log on the TS for reasons why your logon >> > > is being denied. -- >> > > Patrick Rouse >> > > Microsoft MVP - Terminal Server >> > > http://www.sessioncomputing.com >> > > >> > > >> > > "Al" wrote: >> > > >> > > > No it's not my DC, my two DC's are Win2k server >> > > > boxes...also not sure why someone else posted but that's >> > > > not my response. But I still have a log in problem, any >> > > > further help? >> > > > >> > > > Al >> > > > >> > > > >> > > > "Patrick Rouse" wrote: >> > > > >> > > > > Did you happen you make this TS a Domain Controller? >> > > > > If yes, then that's your problem. >> > > > > >> > > > > -- >> > > > > Patrick Rouse >> > > > > Microsoft MVP - Terminal Server >> > > > > http://www.sessioncomputing.com >> > > > > >> > > > > >> > > > > "Al" wrote: >> > > > > >> > > > > > I just installed a new Win2k3 Server and TS, called >> > > > > > MS and entered my 20 CAL's for the TS server. Now I >> > > > > > added my users to Local Users & Groups, Remote >> > > > > > Desktop Users. But I can't log in to the new server >> > > > > > via Remote Desktop at all, neither can my users. Only >> > > > > > the Administrator can. >> > > > > > >> > > > > > I also have a Win2k TS server, properly liscensed in >> > > > > > PER DEVICE, I have another Wink3 TS server, that's >> > > > > > also per USER. the New server is per USER as >> > > > > > well but why can anyone log in via remote >> > > > > > desktop...all 3 TS servers are part of my domain.
From: Al on 15 Aug 2006 17:46
YES and thanks for the fix!!!! Thank you all for your great help. Al "Vera Noest [MVP]" wrote: > Are you running Citrix on top of TS? > > Error messages: > "The desktop you are trying to open is currently available only to > administrators", followed by > "You do not have access to logon to this session" > > are caused by Citrix PS on 2003: > Installing Citrix PS 3.0 on a Windows 2003 creates a new RDP-TCP > listener. The default properties of this listener allow only the > launching of published applications. See > > CTX104106 - Connection Error : The desktop you are trying to open > is currently available only to administrators > http://knowledgebase.citrix.com/kb/entry.jspa?externalID=CTX104106 > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?QWw=?= <Al(a)discussions.microsoft.com> wrote on 15 aug > 2006 in microsoft.public.windows.terminal_services: > > > Yes the TS Licensing is installed on my new Win2k3 Server, and > > my old win2k3 server has it's own licensing, as well as my Win2k > > Server. > > > > 2000 Server - TS CAL Token (per-device) > > old 2003 server - TS CAL Token (per user cal token) > > - Temporary Licenses wink3 - TS per > > Device Cal Token > > NEW 2003 server - TS Server Per user CAL token > > > > I also get this Event ID: 578 > > Object Server - Security > > Object handle: -1 > > Process ID: 2548 > > Primary user Name (name of my server) myserver$ > > Primary domain: abc > > Primary login: (0x0,0x3E7) > > Client user name: administrator > > client Domain: abc > > client logon id: (0x0, 0x15892c9) > > Privileges: SeIncreaseBasePriorityPriviledge > > > > and once I try to log in as myself (not Admin) I get the usual > > errors of: > > > > Error msg 1: > > The Desktop you are trying to connect is currently available to > > Admin only. Contact your Admin to confirm that the current > > settings are in place. > > > > Error msg 2: > > To log on to this computer you must have Terminal Service Access > > permissions on this computer. By Default blah,blah,blah... > > > > But I did place myself and a few other users in the Local user & > > groups, Remote Desktop User group on the NEW Win2k3 server. > > Still no luck whatsoever... > > > > Al > > > > > > "Patrick Rouse" wrote: > > > >> Where is your Terminal Server Licensing Service installed? You > >> know it has to be on a 2003 server, yes? > >> > >> They aren't trying to logon to the console, are they? (i.e. > >> mstsc.exe /console, or using the remote desktops MMC w/ connect > >> to console). > >> > >> -- > >> Patrick Rouse > >> Microsoft MVP - Terminal Server > >> http://www.sessioncomputing.com > >> > >> > >> "Al" wrote: > >> > >> > I get Event ID error 537 & 578, head over to the MS site and > >> > of course no help for my issue. > >> > > >> > "Patrick Rouse" wrote: > >> > > >> > > Look in the event log on the TS for reasons why your logon > >> > > is being denied. -- > >> > > Patrick Rouse > >> > > Microsoft MVP - Terminal Server > >> > > http://www.sessioncomputing.com > >> > > > >> > > > >> > > "Al" wrote: > >> > > > >> > > > No it's not my DC, my two DC's are Win2k server > >> > > > boxes...also not sure why someone else posted but that's > >> > > > not my response. But I still have a log in problem, any > >> > > > further help? > >> > > > > >> > > > Al > >> > > > > >> > > > > >> > > > "Patrick Rouse" wrote: > >> > > > > >> > > > > Did you happen you make this TS a Domain Controller? > >> > > > > If yes, then that's your problem. > >> > > > > > >> > > > > -- > >> > > > > Patrick Rouse > >> > > > > Microsoft MVP - Terminal Server > >> > > > > http://www.sessioncomputing.com > >> > > > > > >> > > > > > >> > > > > "Al" wrote: > >> > > > > > >> > > > > > I just installed a new Win2k3 Server and TS, called > >> > > > > > MS and entered my 20 CAL's for the TS server. Now I > >> > > > > > added my users to Local Users & Groups, Remote > >> > > > > > Desktop Users. But I can't log in to the new server > >> > > > > > via Remote Desktop at all, neither can my users. Only > >> > > > > > the Administrator can. > >> > > > > > > >> > > > > > I also have a Win2k TS server, properly liscensed in > >> > > > > > PER DEVICE, I have another Wink3 TS server, that's > >> > > > > > also per USER. the New server is per USER as > >> > > > > > well but why can anyone log in via remote > >> > > > > > desktop...all 3 TS servers are part of my domain. > |