How to grant right to 'allow log on through Terminal Services' on Win7

thx1139 · Jun 23, 2012

I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.

On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?

chev65 · Jun 23, 2012

thx1139 said:
I have two accounts on my Win7 Home Premium desktop. One is my admin account and the other account, I would like to log into via remote desktop from a thin client running Windows XP Embedded. I can log into my admin account from the thin client but when I try to log into my Kitchen account, I get the following error:

To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop User group does not have this right, you must be granted this right manually.

Click to expand...

On Win7 Xtreme it would be a relatively simple procedure using gpedit.msc (the local group policy editor). The working classes however don't have this snap-in. Is there an alternative method?

I believe you can do this though the Local Security Policy.

Click on Start and then click on Administrative Tools and then click on Local Security Policy. Then click on Local Policies and then User Rights Assignment. Then double click on “Allow log on through Remote Desktop Services” option. Then, under Local Security Setting tab, click on “Add User or Group” button, and then give the username or group name and click on OK. Then click on Apply and then OK.

They use to call Remote Desktop Services > Terminal Services but in Windows 7 it's called Remote Desktop Services.

thx1139 · Jun 23, 2012

Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

chev65 · Jun 23, 2012

thx1139 said:
Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.

thx1139 · Jun 23, 2012

Excuse me if this is irrelevant but does this spreadsheet suggest that it is not possible to modify the settings via the registry?

Download: Group Policy Settings Reference for Windows and Windows Server - Microsoft Download Center - Download Details

If you search the Vista spreadsheet for the string "allow log on through terminal service" then scroll right to column E ("registry settings"), the cell contains the text: "User Rights security settings are not registry keys".

thx1139 · Jun 23, 2012

chev65 said:
thx1139 said:

Are you sure that Local Security Policy is supposed to be available on Win7 Home Premium?

These are the options available to me in Administrative Tools:

Click to expand...

Looks like home premium doesn't have Local security policies either. The only other way would be to go into the registry and find the key for local security policies and try to make adjustments there. I've looked around but couldn't find the key as yet though if you Google around you may find the correct key for this.

If it's not too much trouble coulld you back up your registry, then make a change to the Allow log on through Remote Desktop Services in your Local Security Policy and then make another backup of your registry? By comparing the two backups, I've read that you can determine the relevant keys.

thx1139 · Jun 24, 2012

I attempted to use an elevated command prompt to add the user 'Kitchen' to the group Remote Desktop Users but the group did not exist.

Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\windows\system32>net localgroup "Remote Desktop Users" "Kitchen" /add

System error 1376 has occurred.

The specified local group does not exist.

I didn't expect it to work, but I tried creating the group and then adding the user 'Kitchen' to it, but I still get the original error when I try to log into that account remotely. Could Win 7 Home (Premium) be hardwired not allow me to use remote desktop with a non-admin account?

thx1139 · Jun 24, 2012

Okay, I downloaded the ntrights utility from here: Download: Windows Server 2003 Resource Kit Tools - Microsoft Download Center - Download Details

I used it as follows:

C:\windows\system32>ntrights -u Kitchen +r SeRemoteInteractiveLogonRight

Granting SeRemoteInteractiveLogonRight to Kitchen ... successful

C:\windows\system32>

However, now when I try to log on, I get the error:

The requested session access is denied

I found a thread with a bunch of sys admins saying they solved it with the following registry key but it didn't work for me at all:

Open registry editor, under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\ create a DWORD value called “IgnoreRegUserConfigErrors” and assign the value “1” to this property

Is there anything else worth a try?

logicearth · Jun 24, 2012

It is possible I am miss-remembering but I thought the Home version of Windows can only be a client of Remote Desktop and not a server. I.e., can only connect to other computers and not have computers connect to it.

thx1139 · Jun 25, 2012

It does let me log into my admin account though. It's just non-admin accounts that I can't log onto.

How to grant right to 'allow log on through Terminal Services' on Win7

New member

My Computer My Computer

At a glance

Closed

Attachments

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Closed

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer