AD experts

[catman37]

Hi All,

This is to the Active Directory Experts out there.

Information:
We've been running a Windows Server 2003 AD environment for sometime now.
We have a TS server that our support staff connect to and reset password and remotely connect to fix user problems.
On this server the support staff couldn't connect to ADUP without local admin rights

Recently we hired another company to come in and migrate all AD servers to Windows Server 2008. After this migration was completed the problem started.

When the support staff try open up ADUP now it just hangs and hangs and doesn't open anything. If we give them local admin rights then everything works fine.

Issues is I can't give them this access as they will start breaking things.

Anyone have any suggestions on how to fix this?

The company who completed the migration said that the TS server needs to be reloaded. Also TS server is still Windows 2003 Server

Thanks

 

[web_dude]

did you try loading your users to the remote desktop group ONLY?

go to Computer Management/Local Users and Groups/Groups/Remote Desktop Users

your users should be able to access your server and not able to shutdown the machine (one of the primary things). Then you just give them access to just whatever you have to.