none
Access denied rds farm RRS feed

  • Question

  • Hello.

    I have a windows server 2012 r2 rds farm working properly (5 servers), users connect without problems, as do the administrators, but when granting permission to access a group directly to the farm servers, the access is denied.
    Any advice?

    Thanks
    • Edited by Jonathan_PP Tuesday, September 17, 2019 7:27 PM
    Tuesday, September 17, 2019 7:25 PM

All replies

  • Hi,

     

    >>when granting permission to access a group directly to the farm servers.

    May I know how did you grant permission for a group. Are you referring to add new user group?

     

    Manage users in your RDS collection

    1. Create users and groups in Active Directory
    2. Assign users and groups to collections

    https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-user-management

     

    >>the access is denied

    When and where did the error message prompted? Could you please show us the complete error message you encountered?

     

    Thanks,

    Jenny


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 18, 2019 2:08 AM
  • Hello Jenny.

    The group is assigned to collections and remote desktop users locally.

    Only members of administrators group can logon successfully, when i add the group without administrator rights i have the "access denied" message.

    

    Wednesday, September 18, 2019 1:26 PM
  • Hi,

     

    Please check if remote desktop users are listed under Allow log on through Remote Desktop Services.

     

    Run secpol.msc--->Security Settings\ Local Policies\ User Rights Assignment\ Allow log on through Remote Desktop Services

     

    Reference link:

    https://techcommunity.microsoft.com/t5/Ask-The-Performance-Team/8220-Allow-Logon-through-Terminal-Services-8221-group-policy-and/ba-p/374961

     

    Thanks,

    Jenny


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, September 19, 2019 6:39 AM
  • Hello Jenny.

    The group is listed under allow log on through remote desktop services. 

    Thursday, September 19, 2019 1:45 PM
  • Is this happening to all session hosts or just to one specific session hosts? 
    Are you using UPD/FSLogix or simple roaming profile with redirected folders?

    Are you allowing users to login through the collection settings?

    Thursday, September 19, 2019 2:06 PM
  • Hello gciorty.

    1. This is happening to all sesion hosts.

    2. Not sure about UPD/FSLogix, i think the servers are using simple roaming profiles.

    3. Yeah, the group are allowed to login through the collection settings.

    4. If i add the group to local administrators, access is granted.

    Thanks-

    Thursday, September 19, 2019 2:43 PM