Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

So today, sometime within the last few hours my servers stopped allowing RDP connections to user accounts. I am getting the error "connection was denied because the user account is not authorized for login"

The domain controllers still allow RDP access to the same accounts. Domain computers still allow RDP access. Domain Admin account still has RDP access to the servers.

Users accounts in question are in the enterprise admin, admin, and remote desktop user groups.

It appears to be isolated to only my non-DC servers, I've been digging through all the GPO settings, and the "Allow users to connect remotely using Remote Desktop Services" Is in a "not configured" state, everywhere.

The only link I can think of is that I have been working on setting up a Direct Access server, which create two GPO's for the clients and the server.

share|improve this question
if I add a user to domain admin, that account can gain access. –  Matt Bear Nov 30 '12 at 1:01
Have you checked the membership of the Remote Desktop Users group on the affected servers? Have you checked the Security tab of the RDP protocol on the affected servers to make sure that the user/group in question does indeed have User Acces and Guest Access allowed? –  joeqwerty Nov 30 '12 at 1:37
thanks, I diddnt think to check the security, the group were gone, however they were still in place on the DC's... –  Matt Bear Nov 30 '12 at 2:02
So that's the fix then? The members were not in the RDU group on the affected servers? –  joeqwerty Nov 30 '12 at 2:08
yuup, though I dont know how it got removed –  Matt Bear Nov 30 '12 at 2:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.