Select the product you need help with

Error message when you use Remote Desktop Connection to connect to a Windows Vista-based computer: "The requested session access is denied"

Article ID: 954369 - View products that this article applies to.

SYMPTOMS

When you use Remote Desktop Connection to connect to a Windows Vista-based computer, you receive an error message that resembles the following:

The requested session access is denied.

Back to the top | Give Feedback

To use Remote Desktop Connection to connect to a Windows Vista-based computer, you must be a member of the Remote Desktop Users local group on the Windows Vista-based computer. Additionally, even if you enable the Allow users to connect remotely using Terminal Services policy setting, you still have insufficient permissions to allow a remote connection.

Note The Allow users to connect remotely using Terminal Services policy setting is in the following location:

Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Connections\

Back to the top | Give Feedback

RESOLUTION

To enable users to connect remotely to a terminal server, you must make sure that all the following conditions are true:

Remote Desktop is enabled on the terminal server.
Users have the appropriate rights and permissions to log on remotely to the terminal server.

To resolve this issue in a domain environment, use Group Policy to configure all terminal servers centrally. For detailed information about how to do this, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/51c1def5-8840-4a6e-83af-e542038316671033.mspx?mfr=true

(http://technet2.microsoft.com/windowsserver/en/library/51c1def5-8840-4a6e-83af-e542038316671033.mspx?mfr=true)

Additionally, you must add the user group to the Remote Desktop Users group. To do this, use Group Policy to enable the Allow users to connect remotely using Terminal Services policy setting.

How to add a domain group to the Remote Desktop Users group by using Group Policy

Open the Group Policy Management Console (GPMC). To do this, click Start, click Run, type GPMC.msc, and then press ENTER.
Create and link a GPO that is named Restricted Groups to the terminal server organizational unit (OU).
Right-click the Restricted Groups GPO that is linked to the terminal server OU, and then click Edit.
Configure the Restricted Groups setting in the following location in Group Policy Object Editor: Computer Configuration\Windows Settings\Security Settings\Restricted Groups\
Right-click Restricted Groups, and then click Add Group.
Click Browse, click Locations, select the locations that you want to browse, and then click OK.
Type Remote Desktop Users in the Enter the object names to select box, and then click Check Names. Or, click Advanced, and then click Find Now to list all available groups.
Click the Remote Desktop Users group, and then click OK.
In the Add Groups dialog box, click OK to close it.

The Remote Desktop Users Properties dialog box opens.
In the Members of this group section, click Add.
Click Browse.
In the Select Users or Groups dialog box, type the name of the domain group.
Click Check Names, and then click OK to close the dialog box.
Click OK to close the dialog box and to finish adding the domain group to the Remote Desktop Users group.