Comments on: Remote Desktop Connection

By: gasup1

gasup1 — Thu, 28 Jul 2005 15:51:25 +0000

No, this is not a new user, he had been logging on fine for almost a year, then one day – nothing. SP2 has been installed, but the firewall disabled when I began troubleshooting. I haven’t looked at TCP/IP filtering, but will check it out. It made no sense that the problem occurred on 2 different laptops, but he can log on on any other system in the building.

By: humblenetadmin

humblenetadmin — Thu, 28 Jul 2005 09:38:08 +0000

Was this user able to logon to the terminal server before or is the client a new one. If so, make sure the users account has proper access to the terminal server, is the user a member of the security group that the terminal server is allowing permissions for?

By: sonotsky

sonotsky — Thu, 28 Jul 2005 08:53:56 +0000

Well, my first reaction to this new information is that the laptop has been upgraded to XP SP2 – but the builtin firewall allows 3389/tcp in its’ default configuration.

Perhaps your organization has ripped out the Microsoft Firewall portion of SP2 and replaced it with a 3rd party software firewall, which is blocking 3389? Has TCP/IP Filtering been enabled/monkeyed around with on that laptop?

Cheers

By: gasup1

gasup1 — Wed, 27 Jul 2005 12:23:37 +0000

I have a little more information to add, this connection was working and suddenly stopped. TS is running in Application mode but I have ample licensing to cover it. I don’t know if it’s related, but I just tried to ping the laptop (he’s currently on a VPN connection) and get no response from it. He can ping both me and the server and all other network functions are fine.

By: sonotsky

sonotsky — Wed, 27 Jul 2005 08:57:45 +0000

You also need to see if the Terminal Services component is configured for “Remote Desktop for Administration” or “Application Server” modes. The former is a freebie with a valid Windows Server license, and allows two concurrent sessions. Application Server requires additional licensing; it sounds like your server has been set to this mode.

Also, you will probably want to check the “Restrict Terminal Services users to a single remote session” check box in the Server Properties under the TS configuration snapin.

Cheers