Terminal session to a dc

[muno]

I have a w2k server with terminal services.
Before I updated it to a terminal server, users with could logon to terminal server no problem.
But after I updated it to a domain controller, it says 'you do not have appropriate privileges to logon interactively'.
If I add user to the administrator group, it can logon to the terminal server, but that is not desirable.

Where do I set such permissions that users can logon to terminal server without being an administrator?
-M

[DVNT1]

Allowing Joe User to log onto a terminal server that's also a domain controller is a two-step process. First, use the Domain Controller Security Policy tool on the DC in question to change the security policy for the DC to permit users (or Authenticated Users) to log on locally, then refresh the security policy. (Open the Security Settings folder, double-click Local Policies, and then click User Rights Assignment. Click the Log on Locally right, and then click Add.
Browse for the appropriate group, click Add, then OK your way out of the dialog box and refresh the security policy with
secedit /refreshpolicy machine_policy /enforce

Next, go to Terminal Services Configuration and edit the properties for RDP. Turn to the Permissions tab and add Authenticated Users to the list of groups allowed to use RDP. That should allow Joe User to log on.

from http://x220.minasi.com/forum/topic.asp?TOPIC_ID=3959

[muno]

I checked the domain security policy, but not the others, I'll see them today when I get home.
It's odd, though, that the shortcuts in control panel don't work (domain security policy, and domain controller security policy), it just says that it can't find the computer it's trying to get the console from.

But if I run mmc, and open the policy editors they work fine.
Thanks dvnt1.
-M