samba - May 2008 - Help with Remote Desktop Users group with Samba PDC

Hello,

I have a Samba PDC chugging away, one of the clients is a Windows 2003
Server machine with Remote Desktop enabled. Regular users can log in to
the 2003 Server just fine *if they are at the actual computer*.

Now, I want people to be able to log on to this machine (authenticated by
the Samba PDC) over Remote Desktop. Right now, when I try to log on over
Remote Desktop, I get this error from Windows:

"To log on to this remote computer, you must be granted 'Allow lon on
through Terminal Services' right. By defualt, members of the 'Remote
Desktop Users' group have this right. If you are not a member of the
Remote Desktop Users group or another group ... etc. etc. etc."


So... how do I tell my Samba PDC that my users are members of this group?
I can add users to the Domain Admins group, Domain Users group, etc., but
I *don't have* a Remote Desktop Users group, and am unsure how to add it,
what the sambaSID for this group should be, etc.

This is Samba 3.x, OpenLDAP backend, with smbldap-tools installed on
Mandriva. Thanks!


-- 
 - Keith Palmer
   keith@AcademicKeys.com
   http://www.AcademicKeys.com/

>
> Hello,
>
> I have a Samba PDC chugging away, one of the clients is a Windows 2003
> Server machine with Remote Desktop enabled. Regular users can log in to
> the 2003 Server just fine *if they are at the actual computer*.
>
> Now, I want people to be able to log on to this machine (authenticated by
> the Samba PDC) over Remote Desktop. Right now, when I try to log on over
> Remote Desktop, I get this error from Windows:
>
> "To log on to this remote computer, you must be granted 'Allow lon
on
> through Terminal Services' right. By defualt, members of the
'Remote
> Desktop Users' group have this right. If you are not a member of the
> Remote Desktop Users group or another group ... etc. etc. etc."
>
>
> So... how do I tell my Samba PDC that my users are members of this group?
> I can add users to the Domain Admins group, Domain Users group, etc., but
> I *don't have* a Remote Desktop Users group, and am unsure how to add
it,
> what the sambaSID for this group should be, etc.
>

You don't. You add the domain users group to the 2003 server local remote
desktop users group.


Cheers,

Hugo Monteiro.