[Samba] Help with Remote Desktop Users group with Samba PDC

Hello,

I have a Samba PDC chugging away, one of the clients is a Windows 2003
Server machine with Remote Desktop enabled. Regular users can log in to
the 2003 Server just fine *if they are at the actual computer*.

Now, I want people to be able to log on to this machine (authenticated by
the Samba PDC) over Remote Desktop. Right now, when I try to log on over
Remote Desktop, I get this error from Windows:

"To log on to this remote computer, you must be granted 'Allow lon on
through Terminal Services' right. By defualt, members of the 'Remote
Desktop Users' group have this right. If you are not a member of the
Remote Desktop Users group or another group ... etc. etc. etc."


So... how do I tell my Samba PDC that my users are members of this group?
I can add users to the Domain Admins group, Domain Users group, etc., but
I *don't have* a Remote Desktop Users group, and am unsure how to add it,
what the sambaSID for this group should be, etc.

This is Samba 3.x, OpenLDAP backend, with smbldap-tools installed on
Mandriva. Thanks!


--
- Keith Palmer
keith@AcademicKeys.com
http://www.AcademicKeys.com/


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

>
> Hello,
>
> I have a Samba PDC chugging away, one of the clients is a Windows 2003
> Server machine with Remote Desktop enabled. Regular users can log in to
> the 2003 Server just fine *if they are at the actual computer*.
>
> Now, I want people to be able to log on to this machine (authenticated by
> the Samba PDC) over Remote Desktop. Right now, when I try to log on over
> Remote Desktop, I get this error from Windows:
>
> "To log on to this remote computer, you must be granted 'Allow lon on
> through Terminal Services' right. By defualt, members of the 'Remote
> Desktop Users' group have this right. If you are not a member of the
> Remote Desktop Users group or another group ... etc. etc. etc."
>
>
> So... how do I tell my Samba PDC that my users are members of this group?
> I can add users to the Domain Admins group, Domain Users group, etc., but
> I *don't have* a Remote Desktop Users group, and am unsure how to add it,
> what the sambaSID for this group should be, etc.
>


You don't. You add the domain users group to the 2003 server local remote
desktop users group.


Cheers,

Hugo Monteiro.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

"Hugo Monteiro" <hugo.monteiro@fct.unl.pt> writes:

> >
> > Hello,
> >
> > I have a Samba PDC chugging away, one of the clients is a Windows 2003
> > Server machine with Remote Desktop enabled. Regular users can log in to
> > the 2003 Server just fine *if they are at the actual computer*.
> >
> > Now, I want people to be able to log on to this machine (authenticated by
> > the Samba PDC) over Remote Desktop. Right now, when I try to log on over
> > Remote Desktop, I get this error from Windows:
> >
> > "To log on to this remote computer, you must be granted 'Allow lon on
> > through Terminal Services' right. By defualt, members of the 'Remote
> > Desktop Users' group have this right. If you are not a member of the
> > Remote Desktop Users group or another group ... etc. etc. etc."
> >
> >
> > So... how do I tell my Samba PDC that my users are members of this group?
> > I can add users to the Domain Admins group, Domain Users group, etc., but
> > I *don't have* a Remote Desktop Users group, and am unsure how to add it,
> > what the sambaSID for this group should be, etc.
> >
>
>
> You don't. You add the domain users group to the 2003 server local remote
> desktop users group.
>

Alternatively, you can create a new group in the Samba PDC, and then
add that group to the local Remote Desktop Users group on the Win2003
server. Then you can manage the users using this new group on the
Samba PDC.

>
> Cheers,
>
> Hugo Monteiro.
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>

--
Leigh Wedding
leigh.wedding@telstra.DELETE-this.com

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba