Remote users are unable to connect to the Terminal Server

  • Document ID:7005444
  • Creation Date:04-Mar-2010
  • Modified Date:26-Apr-2012
    • Micro Focus Products:
      Client for Open Enterprise Server (Novell Client)

Environment

Novell Client for Windows 2000/XP/2003 4.91 Support Pack 5
Microsoft Windows Server 2003
Terminal Services
Citrix Metaframe

Situation

Remote users are receiving the following error while trying to connect to a Terminal Server:

"To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, member of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually."

This message will be displayed to everyone who attempts to establish a connection to the terminal server including the Administrator.

Resolution

Ensure that the two named pipes, HydraLsPipe and TermServLicensing, established as NULL session pipes upon the install of Terminal Services, are correctly defined as NULL session pipes.

This configuration is defined in the registry value
 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\NullSessionPipes
 
and can also be administered through the local security policy located at
 
Computer Configuration > Windows Settings > Local Policies > Security Options > Network Access: Named Pipes that can be accessed anonymously.

Additional Information

One way this can become misconfigured is for a ZenWorks-distributed application to reset this registry key with previously captured values which effectively remove HydraLsPipe and TermServLicensing.