How to allow users to logon to terminal server for a user?

Terminal server logon permission is used to specify if the Active Directory (AD) user is allowed to logon to the terminal server.

ADManager Plus helps you configure these settings efficiently with options to set terminal server logon permission for multiple users using CSV import or for individual users using customizable templates and more.

3 ways to configure terminal server logon permission for Active Directory user accounts:

1. Bulk User modification using CSV import

1. Login to ADManager Plus.
2. Navigate to Management > User Management > Bulk User Modification.
3. Under the Terminal Services section, select Terminal Services Profile.
4. Enable the Allow logon to terminal server option.
5. Select the domain you wish to modify users in. You can either choose multiple users one-by-one or use the CSV import option.
6. In case you have chosen the Modify Bulk Users option, import a CSV containing the details of users you wish to modify. The LDAP attribute for this setting is TSAllowLogon. You can learn more about CSV import here.
7. Select the desired users from the CSV and click Apply.

2. Using User Modification templates

1. Login to ADManager Plus.
2. Navigate to Management > User Management.
3. Under User templates, click User Modification Templates.
4. Click + Create New Template.
5. Set a name and description for the template and go to the Terminal tab.
6. Under the Profile/Environment section, enable the Allow logon to terminal server option.
7. Click Save Template.
8. Navigate to the Management tab.
9. Under User Modification, select Modify Single User or Modify Bulk users if you want to modify multiple users.
10. Select the user you wish to modify. For bulk modifications, import a CSV file containing the details of the users you wish to modify. You can find more information about modifying bulk users using CSV files here.
11. Choose the modification template created in step 4 from the Selected Template drop down.
12. Click Preview to check if the changes to be made are correct, and then click Update User.

3. Using Automation

1. Login to ADManager Plus.
2. Navigate to Management > User templates > User Modification Templates.
3. Click + Create New Template.
4. Set a name and description for the template and go to the Terminal tab.
5. Under the Sessions/Remote Control section, choose the desired settings for Remote Access Permission.
6. Under the Profile/Environment section, enable the Allow logon to terminal server option.
7. Click Save Template.
8. Click the Automation tab.
9. On the left pane, select Automation and click + Create New Automation.
10. Set a suitable Automation name and description. Choose User automation as the Automation Category and select the domain you want to configure the automation for.
11. Under the Tasks to automate section, select Modify User by Template as the Automation Task/Policy.
12. Select the User modification template created earlier.
13. Under the Select objects section, choose the Dial-in Deny Access report as the report from which objects are to be selected or import a CSV file containing the details of the users you wish to modify.

    Note: Enable Implement workflow if you want to review and approve this task in this automation. Learn more about configuring workflows here.

14. You can also select the time and frequency of report generation and enable notifications if you want the technician to be notified everytime the automation gets executed.
15. Click Save.