confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 09:12:34 Z

Trying to configure access permissions for remote application users and can not do what we need, and don't find information:

- Have to publish a TS application with RemoteApp to 3 domain users
- Have a Windows Server 2008 member server with installed terminal server and terminal server licensing role.
- Have created a local group "TS users for my application" on my 2008 member server, and intend to add the domain users that are using the application to this group.

Doesn't work at all:
- When choosing my member server in the screen where the users can be added, I can only add users and builtin groups, but not the group that I have created earlier.
- Windows 2008 shows me a group named "TERMINAL SERVER USER". The icon represents a group, the name indicates a single user, and Online help has not any reference to "TERMINAL SERVER USER", only to "Remote Desktop Users". But I'm not able to choose the group "remote desktop users".

Any advaice and explications? Thank you all in advance for any help.
Franz

confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 09:58:01 Z

In Windows Server 2008 R2, name of "Terminal Services" was changed to "Remote Desktop Services". Thats the reason Windows Server 2008 is showing "Terminal Server User" whereas the Online content which you mighte be refering to is for Windows Server 208 R2.

Hope that helps!
Silvia

confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 10:03:55 Z

Also - you can only do User, Group filtering for TS Web only in Windows 2008 R2

Citrix Technology Professional, PubForum.net Founder , Love Microsoft &its people to bits!

confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 12:46:06 Z

Thanks for the information about R2

Still looking for a solution to make it work on 2008 server that is available today:
- How can I add domain user accounts to the group "TERMINAL SERRVER USER"?
- Why is it not possible to add a local member server group to the list of credentials that are allowed to use terminal- or remote desktop services?
- Whats the correct procedure to give three domain users the ritght to access remote applications?

Franz

confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 12:54:12 Z

Regarding the first question:
     For adding a user in Terminal server user group, you need to either type in the command: net localgroup "Terminal Server Users" <Group Name> /add
     or you can use lusrmgr.msc for doing the same thing using UI

Regarding the third question:
     For giving access to any of the domain users, that user must be a part of "Terminal Server Users" (in Win2k8) group or "Remote Desktop Users" group( in Win2k8 R2).

Hope that helps!
Silvia

confusion "terminal server user" Remote desktop user"

Fri, 03 Jul 2009 15:27:48 Z

I'm sorry when my question was not clear. During the initial TS configuration, (add server role wizard) there was neither a group "Terminal Server Users" group or "Remote Desktop Users" visible in local users and computers. I had only a pre-defined object "TERMINAL SERVER USER" with an SID of S-1-5-13. It was not possible to add users to this object.

But after completing the wizard without configuring the user access rights, I have got an "<Error>: Attempt to configure Terminal Server failed with error code 0x80004005. Error HRESULT E_FAIL has been returned from a call to a COM component."

After a research regarding the 0x80004005 installation error, I decided to install Windows 2008 Service Pack 2 on the server, and rebooted the system. Now after the reboot, I have a new local group "Remote Desktop Users", I can add users to it and my problem is solved. Thank you for your help!

best regards,
Franz