Can't log on locally to remote computer after remote desktops acce

Posted: 03-08-2005, 11:15 PM

Carl Hopkins

Guest
Posts: n/a

Two XP Pro machines with all updates. User locally logged onto machine A
using his AD logon. He logs off. From machine B I use Remote Desktops to
log on to machine A as the domain administrator. I log off, which causes a
disconnect. The user trys to locally log onto machine A and gets "Your
interactive logon privilege has been disabled. Please contact your system
administrator.". Local user does a restart and can log on OK. This is
repeatable and happens with multiple instances of Machine A. If, instead of
doing a log off, I do a restart when I am finished with the remote access,
the user can log on locally. But either way, once I have logged on through
Remote Desktops, the machine must be rebooted (restarted) to allow a local
user to log on.

Is this a bug or design? If a bug, what to do to fix it? If design.......?
--
Thanks.... Carl

Responses to "Can't log on locally to remote computer after remote desktops acce"

palironsat

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktop

Posted: 03-21-2005, 07:28 PM

"Carl Hopkins" wrote:

> Two XP Pro machines with all updates. User locally logged
> onto machine A
> using his AD logon. He logs off. From machine B I use Remote
> Desktops to
> log on to machine A as the domain administrator. I log off,
> which causes a
> disconnect. The user trys to locally log onto machine A and
> gets "Your
> interactive logon privilege has been disabled. Please contact
> your system
> administrator.". Local user does a restart and can log on OK.
> This is
> repeatable and happens with multiple instances of Machine A.
> If, instead of
> doing a log off, I do a restart when I am finished with the
> remote access,
> the user can log on locally. But either way, once I have
> logged on through
> Remote Desktops, the machine must be rebooted (restarted) to
> allow a local
> user to log on.
>
> Is this a bug or design? If a bug, what to do to fix it? If
> design.......?
> --
> Thanks.... Carl

Sorry to have nothing to contribute, but I’m having the same issue.
Any help would be appreciated.

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Work-Re...ict275075.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1090992

chadp

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktops acce

Posted: 04-28-2005, 07:25 PM

Check the properties of the AD acct that cannot logon locally to the
machine. On the Terminal Services Profile tab, enable the "Allow logon
to terminal server" option. It appears that the computer gets "stuck"
in terminal services mode after a Remote Desktop user logs off. When a
domain user w/o the rights to logon via terminal services subsequently
tries to logon locally, they are denied access.

-Chad

--
chadp
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1473930.html

Carl Hopkins

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktops

Posted: 04-29-2005, 05:30 PM

Chad... I will test that out shortly. I did check and found that most of
the people were prohibited from logging onto terminal services.

The bigger questions is "Why does it get stuck in TS mode?". I have not
found any MS info talking about this subject.

Thanks......... Carl

"chadp" wrote:

>
> Check the properties of the AD acct that cannot logon locally to the
> machine. On the Terminal Services Profile tab, enable the "Allow logon
> to terminal server" option. It appears that the computer gets "stuck"
> in terminal services mode after a Remote Desktop user logs off. When a
> domain user w/o the rights to logon via terminal services subsequently
> tries to logon locally, they are denied access.
>
> -Chad
>
>
>
> --
> chadp
> ------------------------------------------------------------------------
> Posted via http://www.mcse.ms
> ------------------------------------------------------------------------
> View this thread: http://www.mcse.ms/message1473930.html
>
>

dewaltd

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktops acce

Posted: 04-04-2006, 04:18 PM

I have seen the same "BUG". Here's the scenario:

User A is logged into her XP Pro SP2 Dell Desktop. She request
software to be installed and I use RDC to logon to her compute
remotely using the administrator account to complete the request.
log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO M
REMOTE LOGIN, and she gets the "Your logon privilege has been disabled
error message. This error message is for TERMINAL SERVICES LOGONS bu
NOT FOR LOCAL LOGONS. So...why are we getting this message?

THe work-around above "allow logon to terminal server" in the AD User
and Computers app masks the bug. It appears that once a remote logi
takes place using RDC that the subsequent LOCAL logins use the REMOT
DESKTOP CONNECTION login. You can reboot the computer and it will the
allow a local login without changing the "allow logon to termina
server" setting in AD Users and Computers. Has anyone found a "fix" fo
this?

David

chadp wrote:

> *Check the properties of the AD acct that cannot logon locally to th
> machine. On the Terminal Services Profile tab, enable the "Allow logo
> to terminal server" option. It appears that the computer gets "stuck
> in terminal services mode after a Remote Desktop user logs off. Whe
> a domain user w/o the rights to logon via terminal service
> subsequently tries to logon locally, they are denied access.
>
> -Chad

-
dewalt
-----------------------------------------------------------------------
Posted via http://www.mcse.m
-----------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1473930.htm

Glen Martin

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktops

Posted: 06-01-2007, 04:38 PM

I still don't see a fix for this issue. Another bit of information - I am
able to log on at the console as a domain admin when the problem appears. If
I then log off, the non-admin user is able to log on without encountering the
error.

The problem we have is that we do not want to enable Terminal Services logon
in AD, as we are using it to restrict non-TS users from logging on to our TS.
So that workaround does not work for us.

Another question: Is there any way to apply the TS restrictions in AD to
just the Terminal Server, as opposed to having it affect everyone who uses
RDP to come into an XP host? We use TS and XP RDP hosts for different
purposes, and we would like to restrict who logs onto the TS. Right now,
when we disable a user's TS logon privilege in AD, it also prevents them from
loggin onto an XP RDP host.

"dewaltd" wrote:

>
> I have seen the same "BUG". Here's the scenario:
>
> User A is logged into her XP Pro SP2 Dell Desktop. She requests
> software to be installed and I use RDC to logon to her computer
> remotely using the administrator account to complete the request. I
> log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO MY
> REMOTE LOGIN, and she gets the "Your logon privilege has been disabled"
> error message. This error message is for TERMINAL SERVICES LOGONS but
> NOT FOR LOCAL LOGONS. So...why are we getting this message?
>
> THe work-around above "allow logon to terminal server" in the AD Users
> and Computers app masks the bug. It appears that once a remote login
> takes place using RDC that the subsequent LOCAL logins use the REMOTE
> DESKTOP CONNECTION login. You can reboot the computer and it will then
> allow a local login without changing the "allow logon to terminal
> server" setting in AD Users and Computers. Has anyone found a "fix" for
> this?
>
> David
>
>
>
> chadp wrote:
> > *Check the properties of the AD acct that cannot logon locally to the
> > machine. On the Terminal Services Profile tab, enable the "Allow logon
> > to terminal server" option. It appears that the computer gets "stuck"
> > in terminal services mode after a Remote Desktop user logs off. When
> > a domain user w/o the rights to logon via terminal services
> > subsequently tries to logon locally, they are denied access.
> >
> > -Chad *
>
>
>
> --
> dewaltd
> ------------------------------------------------------------------------
> Posted via http://www.mcse.ms
> ------------------------------------------------------------------------
> View this thread: http://www.mcse.ms/message1473930.html
>
>

Ken Zhao [MSFT]

Guest
Posts: n/a

Re: Can't log on locally to remote computer after remote desktops

Posted: 06-04-2007, 07:14 AM

Hello,

It seems you are replying another post this newsgroup. If you have any
questions, please feel free to submit your question.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
================================================== ==
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ==
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't log on locally to remote computer after remote
desktops
| thread-index: AcekYtb1GvyZcJZGRYmRoe8nhHXUBg==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?R2xlbiBNYXJ0aW4=?= <Silmarillion@nospam.nospam>
| References: <A3CA0816-16AA-4885-BA27-9F2DCDFDCA16@microsoft.com>
<chadp.1o81hy@mail.mcse.ms> <dewaltd.25riue@mail.mcse.ms>
| Subject: Re: Can't log on locally to remote computer after remote desktops
| Date: Fri, 1 Jun 2007 08:38:02 -0700
| Lines: 61
| Message-ID: <B170F978-5339-4931-B747-27C04BA53AF0@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windowsxp.work_remotely
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windowsxp.work_remotely:1646
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windowsxp.work_remotely
|
| I still don't see a fix for this issue. Another bit of information - I
am
| able to log on at the console as a domain admin when the problem appears.
If
| I then log off, the non-admin user is able to log on without encountering
the
| error.
|
| The problem we have is that we do not want to enable Terminal Services
logon
| in AD, as we are using it to restrict non-TS users from logging on to our
TS.
| So that workaround does not work for us.
|
| Another question: Is there any way to apply the TS restrictions in AD to
| just the Terminal Server, as opposed to having it affect everyone who
uses
| RDP to come into an XP host? We use TS and XP RDP hosts for different
| purposes, and we would like to restrict who logs onto the TS. Right now,
| when we disable a user's TS logon privilege in AD, it also prevents them
from
| loggin onto an XP RDP host.
|
| "dewaltd" wrote:
|
| >
| > I have seen the same "BUG". Here's the scenario:
| >
| > User A is logged into her XP Pro SP2 Dell Desktop. She requests
| > software to be installed and I use RDC to logon to her computer
| > remotely using the administrator account to complete the request. I
| > log off and then she tries to logon locally JUST AS SHE WAS PRIOR TO MY
| > REMOTE LOGIN, and she gets the "Your logon privilege has been disabled"
| > error message. This error message is for TERMINAL SERVICES LOGONS but
| > NOT FOR LOCAL LOGONS. So...why are we getting this message?
| >
| > THe work-around above "allow logon to terminal server" in the AD Users
| > and Computers app masks the bug. It appears that once a remote login
| > takes place using RDC that the subsequent LOCAL logins use the REMOTE
| > DESKTOP CONNECTION login. You can reboot the computer and it will then
| > allow a local login without changing the "allow logon to terminal
| > server" setting in AD Users and Computers. Has anyone found a "fix" for
| > this?
| >
| > David
| >
| >
| >
| > chadp wrote:
| > > *Check the properties of the AD acct that cannot logon locally to the
| > > machine. On the Terminal Services Profile tab, enable the "Allow logon
| > > to terminal server" option. It appears that the computer gets "stuck"
| > > in terminal services mode after a Remote Desktop user logs off. When
| > > a domain user w/o the rights to logon via terminal services
| > > subsequently tries to logon locally, they are denied access.
| > >
| > > -Chad *
| >
| >
| >
| > --
| > dewaltd
| > ------------------------------------------------------------------------
| > Posted via http://www.mcse.ms
| > ------------------------------------------------------------------------
| > View this thread: http://www.mcse.ms/message1473930.html
| >
| >
|

LinkBack

Thread Tools

Display Modes

« VPN and email retrieval problem | Rasdial problems »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Remote Control Makes Computer Inaccessible Locally	Larry Epn	Windows Vista Performance & Maintenance	0	04-05-2007 07:26 PM
Remote Desktops	Dave Turner	Windows Vista Networking & Sharing	10	03-07-2006 09:38 PM
Printing Locally when using Remote Desktop	Gina	Windows XP Work Remotely	0	05-03-2004 02:21 PM
Solution - The client could not connect to the remote computer. Remote connections might not be enabled or the computer might be too busy to accept...	copulus	Windows XP Work Remotely	5	03-03-2004 06:11 PM
Remote Desktops	David Sivak	Windows XP Work Remotely	2	11-10-2003 07:16 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90