Lack of Terminal Services access despite having rights


  • I have a user who is receiving the following message when trying to access a Server 2008R2 machine via RDP.

    "To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions.  If you are not a member of the Remote Desktop Users group or another group which has this right, or if the Remote Desktop Users group does not have this right, you must be given this right manually."

    This user is in the proper group which does have the proper rights.  Additionally I've given this person the rights explicitly and set up a group policy pointing at an OU into which I've placed this user to and granting this right.

    I've created a test user with the same rights and memberships as this user and that user predictably can't get in either.  However if I grant this person membership into the domain admins group they can get in fine.  Of course that's not an option.  I see nothing in any logs.


    Sunday, February 28, 2016 7:03 PM


All replies

  • there is a local security group (on each Windows machine) named "Remote Desktop Users", and there is also a similarly named security group in the domain.

    did you add the user into the local group of the RDS/TS session host machine?

    The dedicated RDS/TS forum may be more assistance:

    Don [doesn't work for MSFT, and they're probably glad about that ;]

    Sunday, February 28, 2016 8:11 PM
  • I verified that the user is in the Remote Desktop Users group for both the local machine and the domain.  I'll give that forum a try thanks.
    Monday, February 29, 2016 6:05 PM
  • Hi,

    Have you delegated the user to Allow logon through Remote Desktop Services in GPO?

    Best Regards,


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact

    Tuesday, March 1, 2016 7:25 AM