[Sdesign]

Originally Posted by Smart-X

What's the account name and account domain?
You don't have to provide the actual names, but does the 'Account Name' is the Teminal Server name, or another machine's name?
What's the 'Account Domain'? is that the machine name or your AD domain?

Sorry i didnt understnd the Q.

[Smart-X]

In the log you provided, you have the following entries:
Security ID: SYSTEM
Account Name: ********$
Account Domain: ******

Which account is it? Try to give it the 'Act As Part of the Operating System' privilege.

If it still doesn't work, try to give (temporarily) the 'Act as part of the operating system' to EVERYONE.

This is only for test purposes. Do not keep it that way because it is a major security risk.

I just want to understand if we're on the right direction.

[Sdesign]

Originally Posted by Smart-X

In the log you provided, you have the following entries:
Security ID: SYSTEM
Account Name: ********$
Account Domain: ******

Which account is it? Try to give it the 'Act As Part of the Operating System' privilege.

If it still doesn't work, try to give (temporarily) the 'Act as part of the operating system' to EVERYONE.

This is only for test purposes. Do not keep it that way because it is a major security risk.

I just want to understand if we're on the right direction.

hi ,
i chcek the security tab and everything there is allow ( like attach )
where i need to set the 'Act As Part of the Operating System' ?

[Smart-X]

Administrative Tools --> Local Security Policy --> Security Settings --> Local Policies --> User Rights Assignment --> Act as part of the operating system

[Sdesign]

Originally Posted by Smart-X

Administrative Tools --> Local Security Policy --> Security Settings --> Local Policies --> User Rights Assignment --> Act as part of the operating system

Still access denied
after the change in the local policy.

[Smart-X]

Hello,

Just to clear things up, does this Server has the Terminal Server rule installed or are you just using the default remote control option?

One more question, are you trying to reconnect from the same PC or from another machine?

Thanks,
Smart-X

[Sdesign]

Originally Posted by Smart-X

Hello,

Just to clear things up, does this Server has the Terminal Server rule installed or are you just using the default remote control option?

One more question, are you trying to reconnect from the same PC or from another machine?

Thanks,
Smart-X

hi , ( thx for trying to helping me out here )

the Terminal Server rule are installed and activated.
im trying to connect from the same computer to the terminal server...

[Smart-X]

Hello,

Very strange issue... Can you please try the same thing (logon to the Terminal server, disconnect and then try to reconnect) from a different PC?

Please try also different RDP client versions (e.g. 5.2, 6.0, 6.1...) and let us know the results.

One more thing, when you open tsadmin.msc on this server (when you connect from a different PC and different user), do you see your original session in a disconnected state?

Thanks,
Smart-X

[Sdesign]

Originally Posted by Smart-X

Hello,

Very strange issue... Can you please try the same thing (logon to the Terminal server, disconnect and then try to reconnect) from a different PC?

Please try also different RDP client versions (e.g. 5.2, 6.0, 6.1...) and let us know the results.

One more thing, when you open tsadmin.msc on this server (when you connect from a different PC and different user), do you see your original session in a disconnected state?

Thanks,
Smart-X

i know it's strange this is why i post here..
- i allready tried it from diffrent computers and got the same problem.
- when i open the tsadmin.msc i can see my user name under Dissconnected state ...

wierd wierd wierd !!!

[Smart-X]

Try to reset the security configuration.
Before you do that, take perform full backup, just in case...

In order to reset the security configuration, open CMD, cd to %windir%\inf and enter the following command:

secedit /configure /db defltbase.sdb /cfg defltbase.inf /overwrite /verbose

Note that this resets all security configuration made on the server (using local group policy).

However, if you have Group Policy configuration coming from Active Directory, it would still override the local settings, so if you think you might have a GPO that might affects your server in this way, move the computer account to a different OU or check the 'Block Inheritance'

Post back if it helped