Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a VM server, with VSphere, I have 2 windows server 2003 VMs:

A server holds the DNS, DC and AD roles. IIS holding a web platform that allows Domain Admins to create new Domain Users (which are also added to the Remote Desktop Users group of the DC) And also 1 windows 7 VM. All these VMs are computers on the same domain (which is sitting on the DC VM).

I access all those VMs through Remote Desktop, when I try to login with a Domain user which is not a Domain Admin to any VM (beside the DC/AD VM) I get this error:

"The requested session access is denied."

What should I do and how can I fix it?

share|improve this question
    
Add the users to the Remote Desktop Users group of the virtual machines you want them to log onto. –  joeqwerty Sep 12 '13 at 18:58
    
so when a user is being created I need to add it to all Remote Desktop Users groups in all the VMs? what if I'll add computers in the future? I'll need to add all the users manually to the group? –  Matan Kadosh Sep 12 '13 at 19:11
4  
System administration requires effort. There are a number of ways to accomplish this, these are just a few of those possible ways: 1. You can use Group Policy to add the domain Users group to the local Remote Desktop Users group. 2. You can manually add the local Users group to the local Remote Desktop Users group. - 3. You can manually add the domain Users group to the local Remote Desktop Users group. –  joeqwerty Sep 12 '13 at 19:18
    
currently the users are in the Remote Desktop Users Group on the DC/AD VM, I've added the Domain Users group to the local Remote Desktop Users group. the question is if I need to add them to the Remote Desktop Users group in each VM/Domain Computer? –  Matan Kadosh Sep 12 '13 at 21:16
    
If you want them to be able to log into each VM via RDP then they need to be in the local Remote Desktop Users group. However you decide to do that is up to you. Another method would be to modify which group is allowed to login to the virtual machines via RDP by selecting them on the Remote tab of the System Properties pages. If you add the local Users group or the domain Users group then they'll be able to log on. Note that this method simply adds the group(s) that you select to the Remote Desktop Users local group, so it's doing the same thing it's just using a different method. –  joeqwerty Sep 12 '13 at 21:36
show 1 more comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.