How to grant right to 'allow log on through Terminal Services' on Win7


  1. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
       #1

    How to grant right to 'allow log on through Terminal Services' on Win7


    I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

    To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.
    On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?
      My Computer


  2. Posts : 8,870
    Windows 7 Ult, Windows 8.1 Pro,
       #2

    thx1139 said:
    I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

    To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.
    On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?
    I believe you can do this though the Local Security Policy.

    Click on Start and then click on Administrative Tools and then click on Local Security Policy. Then click on Local Policies and then User Rights Assignment. Then double click on “Allow log on through Remote Desktop Services” option. Then, under Local Security Setting tab, click on “Add User or Group” button, and then give the username or group name and click on OK. Then click on Apply and then OK.

    They use to call Remote Desktop Services > Terminal Services but in Windows 7 it's called Remote Desktop Services.
    Attached Thumbnails Attached Thumbnails How to grant right to 'allow log on through Terminal Services' on Win7-remote-desktop-services.png  
      My Computer


  3. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #3

    Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

    These are the options available to me in Administrative Tools:

      My Computer


  4. Posts : 8,870
    Windows 7 Ult, Windows 8.1 Pro,
       #4

    thx1139 said:
    Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

    These are the options available to me in Administrative Tools:

    Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.
      My Computer


  5. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #5

    Excuse me if this is irrelevant but does this spreadsheet suggest that it is not possible to modify the settings via the registry?

    Download: Group Policy Settings Reference for Windows and Windows Server - Microsoft Download Center - Download Details

    If you search the Vista spreadsheet for the string "allow log on through terminal service" then scroll right to column E ("registry settings"), the cell contains the text: "User Rights security settings are not registry keys".
      My Computer


  6. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #6

    chev65 said:
    thx1139 said:
    Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

    These are the options available to me in Administrative Tools:

    Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.
    If it's not too much trouble coulld you back up your registry, then make a change to the Allow log on through Remote Desktop Services in your Local Security Policy and then make another backup of your registry? By comparing the two backups, I've read that you can determine the relevant keys.
      My Computer


  7. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #7

    I attempted to use an elevated command prompt to add the user 'Kitchen' to the group Remote Desktop Users but the group did not exist.

    Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\windows\system32>net localgroup "Remote Desktop Users" "Kitchen" /add

    System error 1376 has occurred.


    The specified local group does not exist.
    I didn't expect it to work, but I tried creating the group and then adding the user 'Kitchen' to it, but I still get the original error when I try to log into that account remotely. Could Win 7 Home (Premium) be hardwired not allow me to use remote desktop with a non-admin account?
      My Computer


  8. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #8

    Okay, I downloaded the ntrights utility from here: Download: Windows Server 2003 Resource Kit Tools - Microsoft Download Center - Download Details

    I used it as follows:

    C:\windows\system32>ntrights -u Kitchen +r SeRemoteInteractiveLogonRight

    Granting SeRemoteInteractiveLogonRight to Kitchen ... successful

    C:\windows\system32>
    However, now when I try to log on, I get the error:

    The requested session access is denied
    I found a thread with a bunch of sys admins saying they solved it with the following registry key but it didn't work for me at all:

    Open registry editor, under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\ create a DWORD value called “IgnoreRegUserConfigErrors” and assign the value “1” to this property
    Is there anything else worth a try?
      My Computer


  9. Posts : 5,642
    Windows 10 Pro (x64)
       #9

    It is possible I am miss-remembering but I thought the Home version of Windows can only be a client of Remote Desktop and not a server. I.e., can only connect to other computers and not have computers connect to it.
      My Computer


  10. Posts : 110
    Win 7 Home Premium (OEM) - Install date: 02-2010
    Thread Starter
       #10

    It does let me log into my admin account though. It's just non-admin accounts that I can't log onto.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:30.
Find Us