Terminal server logon gives “access denied”

When a user logs on to a terminal server the error “access denied” pops up.

In the eventlog the following errors (event id 6 and 15)

 

 

 

To fix this problem add the MaxTokenSize key to the register with a value of 65535:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

Entry: MaxTokenSize
Data type: REG_DWORD
Value: 65535

 

To change this for multiple Terminal Servers you can add it with a gpo: http://support.microsoft.com/kb/938118

Leave a Reply

Your email address will not be published.