Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to grant right to 'allow log on through Terminal Services' on Win7

23 Jun 2012   #1
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 
How to grant right to 'allow log on through Terminal Services' on Win7

I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

Quote:
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.
On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?


My System SpecsSystem Spec
.

23 Jun 2012   #2
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by thx1139 View Post
I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

Quote:
To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.
On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?
I believe you can do this though the Local Security Policy.

Click on Start and then click on Administrative Tools and then click on Local Security Policy. Then click on Local Policies and then User Rights Assignment. Then double click on “Allow log on through Remote Desktop Services” option. Then, under Local Security Setting tab, click on “Add User or Group” button, and then give the username or group name and click on OK. Then click on Apply and then OK.

They use to call Remote Desktop Services > Terminal Services but in Windows 7 it's called Remote Desktop Services.


Attached Thumbnails
-remote-desktop-services.png  
My System SpecsSystem Spec
23 Jun 2012   #3
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

My System SpecsSystem Spec
.


23 Jun 2012   #4
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by thx1139 View Post
Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.
My System SpecsSystem Spec
23 Jun 2012   #5
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

Excuse me if this is irrelevant but does this spreadsheet suggest that it is not possible to modify the settings via the registry?

Download: Group Policy Settings Reference for Windows and Windows Server - Microsoft Download Center - Download Details

If you search the Vista spreadsheet for the string "allow log on through terminal service" then scroll right to column E ("registry settings"), the cell contains the text: "User Rights security settings are not registry keys".
My System SpecsSystem Spec
23 Jun 2012   #6
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

Quote   Quote: Originally Posted by chev65 View Post
Quote   Quote: Originally Posted by thx1139 View Post
Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.
If it's not too much trouble coulld you back up your registry, then make a change to the Allow log on through Remote Desktop Services in your Local Security Policy and then make another backup of your registry? By comparing the two backups, I've read that you can determine the relevant keys.
My System SpecsSystem Spec
24 Jun 2012   #7
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

I attempted to use an elevated command prompt to add the user 'Kitchen' to the group Remote Desktop Users but the group did not exist.

Quote:
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\windows\system32>net localgroup "Remote Desktop Users" "Kitchen" /add

System error 1376 has occurred.


The specified local group does not exist.
I didn't expect it to work, but I tried creating the group and then adding the user 'Kitchen' to it, but I still get the original error when I try to log into that account remotely. Could Win 7 Home (Premium) be hardwired not allow me to use remote desktop with a non-admin account?
My System SpecsSystem Spec
24 Jun 2012   #8
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

Okay, I downloaded the ntrights utility from here: Download: Windows Server 2003 Resource Kit Tools - Microsoft Download Center - Download Details

I used it as follows:

Quote:
C:\windows\system32>ntrights -u Kitchen +r SeRemoteInteractiveLogonRight

Granting SeRemoteInteractiveLogonRight to Kitchen ... successful

C:\windows\system32>
However, now when I try to log on, I get the error:

Quote:
The requested session access is denied
I found a thread with a bunch of sys admins saying they solved it with the following registry key but it didn't work for me at all:

Quote:
Open registry editor, under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\ create a DWORD value called “IgnoreRegUserConfigErrors” and assign the value “1” to this property
Is there anything else worth a try?
My System SpecsSystem Spec
24 Jun 2012   #9
logicearth

Windows 8.1 Pro (x64)
 
 

It is possible I am miss-remembering but I thought the Home version of Windows can only be a client of Remote Desktop and not a server. I.e., can only connect to other computers and not have computers connect to it.
My System SpecsSystem Spec
25 Jun 2012   #10
thx1139

Win 7 Home Premium (OEM) - Install date: 02-2010
 
 

It does let me log into my admin account though. It's just non-admin accounts that I can't log onto.
My System SpecsSystem Spec
Reply

 How to grant right to 'allow log on through Terminal Services' on Win7




Thread Tools





Similar help and support threads
Thread Forum
these services settings kills network in win7, which ones?
thanks.
General Discussion
Windows says it won't grant access permission, but it does grant.
I tried to take the following steps to get the "full control" permission on a "System Volume Information" folder for a user account I had created. right-click on the folder -> Properties -> Security tab -> Edit -> the "Permissions for <object>" dialog appears -> Add -> the "Select Users or...
General Discussion
A Random question about win7 services.
I am wondering does win7 have some built in service that when the pc is idle for X amount of time it makes the hdd go nuts? When this happens the hdd access light on the front of my pc stays solidly lit, I don't like the wear and tear on my hdd is there anyway to disable this "Feature"?
General Discussion
Win7 Sharing Problem (Windows Services Issue?)
Hello SevenForums! I have a problem with filesharing in my home network and hope you can help me :) Until a recent windows re-installation everything worked just fine. This, however, is no longer the case. My network consists of: HomeBox Win x64 Pro (fresh install SP1 + current updates) ...
Network & Sharing
Shadow windows 7 from Terminal Services Manager
I've been trying to get this working for quite some time but to no avail and 'googling' doesnt seem to lead me in the right direction. In the past, when client workstations were running Windows XP Pro, we could use Terminal Services Manager and take remote control over the user logged into the...
Network & Sharing
SharePoint Services on Win7 32Bit
Hi I was using Win XP but after crashing my laptop I decided to use win7 32bit but now I'm facing many compatibility issues. How can I install SharePoint on win7. Even if I can able to install WSS 3.0, it will be sufficient for me to get out form this situation. Send me some links that...
Software

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:58.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App