Configuring User Permissions for Client Logon

Category: L-series -> Troubleshooting -> Performance/Stability -> Operating

Systems/Applications
Logging into Windows through an NComputing access device accesses the same user profiles, files, and
settings that are present on the host PC. However, not all user profiles will be permitted to logon
remotely by default. This guide walks through a basic user permissions configuration that will allow any
desired user or user group to logon remotely. These permissions can be configured locally (as shown
below) or set at the domain level and passed down via GPO.
Symptoms
This guide has been confirmed as a possible solution for the following symptoms:
Error: "The local policy of this system does not permit you to logon interactively"
Client Logon Limited to Administrators Only
Policy Configuration
To allow a desired user or user group to logon remotely, please take the following steps:
1. Click the Start Menu and select "Run"
2. Type "gpedit.msc" into the Run bar, and click "OK"
3. Within the Group Policy Object Editor, go to:
Computer Configuration > Windows Settings > Security Settings > Local Policies > User
Rights Assignment
4. In the right-hand pane, locate "Allow Log on through Terminal Services" (or Remote Desktop
Services) and double-click it.
5. Click "Add User or Group" and enter the user or user group name desired.
Note: Entering "everyone" in this field allows anyone with local logon permissions to also
logon remotely.
6. Click "OK" to apply the changes.
Summary
This procedure is part of NComputing's general best practices for NComputing deployment. If you
encounter any problems with the configuration, or if logon issues persist, please contact NComputing
technical support at http://www.ncomputing.com/techsupport