Error message when you use Remote Desktop Connection to connect to a Windows Vista-based computer: "The requested session access is denied"
Note The Allow users to connect remotely using Terminal Services policy setting is in the following location:
- Remote Desktop is enabled on the terminal server.
- Users have the appropriate rights and permissions to log on remotely to the terminal server.
How to add a domain group to the Remote Desktop Users group by using Group Policy
- Open the Group Policy Management Console (GPMC). To do this, click Start, click Run, type GPMC.msc, and then press ENTER.
- Create and link a GPO that is named Restricted Groups to the terminal server organizational unit (OU).
- Right-click the Restricted Groups GPO that is linked to the terminal server OU, and then click Edit.
- Configure the Restricted Groups setting in the following location in Group Policy Object Editor: Computer Configuration\Windows Settings\Security Settings\Restricted Groups\
- Right-click Restricted Groups, and then click Add Group.
- Click Browse, click Locations, select the locations that you want to browse, and then click OK.
- Type Remote Desktop Users in the Enter the object names to select box, and then click Check Names. Or, click Advanced, and then click Find Now to list all available groups.
- Click the Remote Desktop Users group, and then click OK.
- In the Add Groups dialog box, click OK to close it.
The Remote Desktop Users Properties dialog box opens.
- In the Members of this group section, click Add.
- Click Browse.
- In the Select Users or Groups dialog box, type the name of the domain group.
- Click Check Names, and then click OK to close the dialog box.
- Click OK to close the dialog box and to finish adding the domain group to the Remote Desktop Users group.
Article ID: 954369 - Last Review: 07/03/2008 01:43:33 - Revision: 1.1
- kbtshoot kbexpertiseinter kbprb KB954369