Unable to Access a Windows 2000 Terminal Services Session (276496)

The information in this article applies to:

Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Datacenter Server

This article was previously published under Q276496

SYMPTOMS

After logging on to a Windows 2000 Terminal Services session, but before the desktop actually appears, you receive the following error message:

You do not have access to logon to this session.

By default, when you install Windows 2000 Terminal Services the permission properties of Remote Desktop Protocol-Transmission Control Protocol (RDP-tcp) include the following groups and settings:

Administrators: full control, user access, and group access
System: full control, user access, and group access
Users: user access, guest access

CAUSE

This error message can occur if you have modified the RDP-tcp permission properties. If you remove the User group from the properties of RDP-tcp, you receive the "You do not have access to logon to this session" error message and you are unable to log on to Terminal Services.

RESOLUTION

Make sure that the Permissions tab in the RDP-tcp properties dialog box includes the Users group, or the user account name of the user who is attempting to log on:

Open Terminal Services Configuration (click Start, and then click Administrative Tools).
Right-click RDP-tcp, and then click Properties.
Click the Permissions tab. If the Users group or the user account that is attempting access is not present, click Add to add the Users group or the user's account name.
Click Apply.
Quit Terminal Services Configuration.

STATUS

This behavior is by design.

Modification Type:	Minor	Last Reviewed:	1/26/2006
Keywords:	kberrmsg kbprb kbTermServ KB276496