Friday, May 13, 2011

Troubleshooting logon access policy and permission errors

Even if you are logging in using the correct username and password, you may receive one of the following error messages if you attempt to log in to a system and the account doesn't have access or the system is configured improperly. You can solve these problems using the information below.

» The local policy of this system does not permit you to logon interactively

This error means that account you are using hasn't been granted rights to log on interactively via remote desktop/terminal services. To grant rights, see the grant terminal services log on permission topic.

» You do not have access to logon to this session

This message is caused because the account you are using hasn't been added as a user that can access remote desktop/terminal services To enable remote desktop, see the enable remote desktop for user topic.

Remote Desktop Client Software

» Windows

Windows Server versions, Windows XP, and Vista Premium, Business, and Ultimate come with a bundled Remote Desktop client. For other Windows versions, you can download Microsoft's Remote Desktop client:
DownloadMicrosoft Remote Desktop 5.1 Client [Windows 95, Windows 98 and 98 Second Edition, Windows Me, Windows NT 4.0, Windows 2000, Windows 2003] For Windows XP SP2, there is a Remote Desktop client upgrade to version 6.1, enabling additional functionality when connecting to Vista and Windows Server 2008 systems:
DownloadMicrosoft Remote Desktop 6.1 Client [Windows XP SP2] Devolutions has created a powerful client that can manage multiple remote desktop connections. Its available free from their website:
DownloadDevolutions Remote Desktop Manager [Windows]

» Mac OS X

Microsoft has an OS X client for Remote Desktop:
DownloadMicrosoft Remote Desktop Connection Client for Mac 2 [Mac OS X] There is also an open source native OS X client called CoRD has been developed by Craig Dooley and Dorian Johnson. You can get it from sourceforge:
DownloadCoRD Remote Desktop Client [Mac OS X]

» iPhone/iPod Touch

There are two remote desktop clients available for the iPhone or iPod Touch:

» Windows Mobile

Some Windows Mobile phones come with a Remote Desktop client, but many are deployed without the RDP client. Fortunately, some smart people over at pdaphonehome were able to extract the Windows Mobile 6 RDP client into an installer that works on WM5 and WM6. You can find it on their forums:
DownloadWindows Mobile 5/6 Remote Desktop Client

» Linux/Unix

Many remote desktop clients are available for Linux/Unix. The following are the major clients:
  • rdesktop – a generic X Window System Linux/Unix remote desktop client. Most other clients are based of it in some way.
    Downloadrdesktop web site
  • krdesktop – a KDE frontend for rdesktop
    Downloadkrdesktop web site
  • tsclient – a GNOME frontend for rdesktop
    Downloadtsclient web site

» Java

There are several cross platform Java remote desktop clients:

How to force a single session or allow multiple Remote Desktop sessions per user

Remote Desktop/Terminal Services has two settings for multiple sessions. You can either allow multiple sessions per user (in which case if you log in twice, you'll get two sessions), or force a single session per user (in which case you can only log in once and subsequent sessions will be redirected to the original session.
To change this setting, you'll need to perform a registry change. The following steps describe the process:
  1. Start Registry Editor (by default, this is located at c:\windows\regedit.exe).
  2. Go to the following registry key:
    HKEY_LOCAL_MACHINE\
        System\CurrentControlSet\Control\TerminalServer

  3. If the fSingleSessionPerUser value doesn't exist, create a new DWORD value named fSingleSessionPerUser
  4. Open the fSingleSessionPerUser value. The possible values for this setting are as follows:
    0x0
    Allow multiple sessions per user
    0x1
    Force each user to a single session

  5. Enter the new setting, and then click OK.

How to change the Remote Desktop port

By default, Remote Desktop listens on port 3389 (via TCP). Using a quick registry tweak, you can change that to any other valid port. The following steps describe the process:
  1. Start Registry Editor (by default, this is located at c:\windows\regedit.exe).
  2. Go to the following registry key:
    HKEY_LOCAL_MACHINE\
        System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp

  3. Open the PortNumber subkey.
  4. Pick the Decimal Base option.
  5. Enter the new port number, and then click OK.

Does Remote Desktop send traffic over any other ports?

Primary remote desktop traffic will go over the one port defined above. If sound is enabled, streaming will be attempted over UDP directly. If this connection can't be made, Remote Desktop will stream sound over a virtual channel via the main remote desktop port.
No other ports are used.

How to connect to a non-standard remote desktop port

To connect to a different port than the default 3389 RDP port, specify the port using one of the following formats:
  • <computername>:<port>
    example: computer:23389
  • <ip address>:<port>
    example: 192.168.1.1:23389

Thursday, December 9, 2010

Installing Windows XP

In case you have to make a new installation of Windows XP ( Home or Professional), you
can use this as a guideline to make yourself familiar with the process , when installing a retail
version (full version or upgrade), this procedure is NOT valid for installation of Windows XP
via a "Recovery CD-ROM".

I am also assuming, that your system is able to boot from a CD-ROM, like the Windows XP
installation CD-ROMs (which should be no issue, because if your system is NOT able to boot
from a CD-ROM, it is most probably already a few years old and NOT powerful enough to
run Windows XP (however : if your system is NOT able to boot from CD-ROM and you insist on installing
Windows XP, you can download from the Microsoft Website boot-floppies, allowing to start from a floppy-disk reboot ).

Check in your PC-BIOS, that "booting from CD-ROM" is enabled and that the system will
first try to boot from CD-ROM
, before attempting to boot from harddisk:
Insert your Windows XP installation CD-ROM and power-on/restart your system:
It will show the PC-BIOS startup message, like: memory test, memory installed :

When you get the message to
"press any key to boot from CD...", press any key.
( this is new on Microsoft Windows 2000 and XP CD's:
if you do not press any key, it will NOT boot from CD-ROM,
but boot from harddisk, so that people which "forgot" to take
out such bootbable CD-ROM's are not getting confused by
the CD-ROM installation procedure )
Once the boot from CD-ROM has started, it will display at the top of the screen :
"Setup is inspecting your computer's hardware configuration. . ."


After a brief delay, the typical Microsoft "blue Installation screen" is displayed,
with "Windows Setup" displayed at the top and at the bottom of the screen the information,
that "Setup is loading Files" (loading all type of device drivers) :


It will finally state : "Setup is starting Windows" and will display after a short delay the
"Windows XP Professional Setup" or "Windows XP Home Setup" screen :


Select "to set up Windows XP now" and press the ENTER-key :

The "Windows XP Licensing Agreement" is displayed, accept it by pressing the F8-key.
(as indicated on the botton of the screen).

Setup will now display the partitioning of your disk:

If your system has already an operating system installed, you will see them listed.
You have now a simple Disk Manager, allowing you to create and delete partitions.
You will need to select either an existing partition or "Unpartitioned space" (if available)
to define, on which partition to install Windows XP, then press ENTER.

The next screen is asking for the type of disk formatting to be used :

(if you install XP into an already existing partition, you have additional options to leave the
current disk formatting intact).
Select the type of disk formatting : FAT or NTFS

FAT : possible to access from a DOS-boot floppy, but limited to max. 4 GByte with very
inefficient file-storage (cluster-size of 64 KByte), no Security features
NTFS : not accessible from a DOS-boot floppy, but NOT limited in size and using an efficient
file-storage with a small cluster-size, able to use File-System Security features.

Windows XP requires a lot of disk-space for itself, you should use at least a 4 GByte partition.
I suggest to use NTFS : make your choice (highlight) and select it by pressing ENTER.

Setup will start formatting the disk :

and will then start copying files from the CD-ROM to the disk :


The system will then need to reboot :

( this is a funny screen : the system will restart anyway after 1 seconds, and you have only the choice to press
ENTER to shorten the delay, saving max. 15 seconds in the complete installation process of 30-45 minutes )


After the restart, Windows XP starts the first time with the Graphical User Interface ( GUI ) :




Setup will continue to copy files and to install devices :


You can adjust regional settings (for example if you install an English version of
Windows XP in a different country and the keyboard layout/language is not the
same language as your copy of Windows XP, you should use the button "Customize.."
and configure the proper keyboard, to make sure that you can enter in the following steps
of the setup/installation properly the information ) :


Personalize your system by entering your name and organization :


Enter your 25 character Product key (as it was delivered with your Windows XP CD-ROM ) :


Define the name for your computer and the password for the Administrator account :

based on the organization (define above), Setup creates a name for your computer,
with complex name (to make sure that the name will be unique in a network configuration.
Since this name will be used later inside the "Network Neighborhood" / "My Network places",
change it to an easy to understand , but UNIQUE name (like : P633VM ).

If you enter a password for the Administrator Account, make sure that you remember it
(to be save, write if down ! ).

Check the "Date and Time Settings", allowing to check/define/correct the
date, time and timezone :


If you have a network card in your system, which was detected by Setup, you will be asked
to select whether to install a typical configuration (which you can always change later) or if you
like to make now already special settings (like: defining your IP-address ) :


Setup continues with "Finalizing installation " (nothing to do for you ) :


The system will reboot again :
Setup will configure then your screen resolution.
The system will try to connect via the Internet to the Microsoft website, you can savely
select to "Skip" that step.
You will be prompted to enter the first Usernames (which will be defined as Administrators)
and you will get the new XP Welcome screen :

(note : if only one user was defined during setup and no password was defined, the system will skip the
Welcome screen and continue to display immediately the new Windows XP desktop ).
You are now ready to use the
"colorful" Windows XP :

You can adjust the the system to look
and work more

Recovering Windows XP using the Recovery Console

Most Windows NT installations used a system-drive ( C: ) with FAT-filesystem, to allow
access to the drive via a DOS-boot-floppy to be able to copy files (like : updated DLL's)
to the system.
Windows 2000 and XP allow to use on the system-drive ( C: ) the NTFS-file-system,
maintaining data-security but allowing limited access to the disk via the

Recovery Console

to repair a damaged system (like to fix boot problems).

Insert your Windows 2000 / XP installation CD-ROM and boot from CD-ROM :
(note : some Windows XP Revovery CD-ROM's do not allow to start the Windows SETUP,
in such cases you can try to use to create Windows XP Boot Floppy disks and boot from floppy).

Windows 2000:
On the "Windows 2000 Professional Setup" menu, select "R" for repair :


as Repair option, select "C" to use the "Recovery Console" :


Windows XP:
On the "Windows XP Professional Setup" menu, select "R" for Recovery Console :


Windows 2000 / XP :
You will be prompted to select the Windows installation to repair :
(usually just "1" ) :


You will need to enter the Administrator password !


At the command-prompt, type any valid command.
To get an overview on the supported commands, type : HELP




To get more detailed information on any of these commands, type the commannd followed by "/?",
which will then display the specific Help-information.

You have access to :
- the root directory of all disks
- the Windows system directory (and all sub-directories), usually : C:\WINNT
- to removable disks (floppy disk and CD-ROM drives)

You have NO Access to any other directory !

You can copy files FROM Floppy disk to the directories on disk, to which you have access.
You can NOT copy files from disk to Floppy Disk !


type : EXIT to restart the system.

Recovering from Bootup problems :
When the system displays on booting a message of "missing" NTLDR or NTDETECT,
you can copy these files via Recovery Console from the CD-ROM :

make sure to be on the root of the C:-drive (please make : CD \ ).
In my example, the CD-ROM drive is Drive D: , allowing to make a copy of the files
NTLDR and NTDETECT.COM from the i386-directory to the C:\ - root directory.


If there is a problem with the Boot-sector on the C:-drive, you can use "fixboot" to write
a new boot-sector.
If there is a problem with the Master-Boot-Record of the disk (maybe damaged by a virus),
you can use "fixmbr" to write a new MBR :


Extract files from CAB-files using "expand" :


example: I have copied a CAB-file from CD-ROM, display the content of the CAB-file
using "expand xxx.CAB /d /f:*" and then extract the required files via : "expand xxx.CAB /f:yyy":


Partition problems :
You can use "diskpart" to manage disk partitions :

If called up without an option, you get a simple user-interface :


Services and Devices
Use "listsvc" to display a list of all devices and services :



You can use "enable" and "disable" to switch on/off :



The Recovery Console can be installed on the harddisk as an additional boot-up selection:
at a command-prompt: drive:\i386\Winnt32.exe /cmdcons,
where drive is either the CD-ROM or disk with the Windows XP installation files :


The Windows 2000 Recovert Console has been successfully installed.

To use the Windows 20000 Recovery Console, restart your computer and then select
Windows 2000 Recovery Console from the Startup Menu.

For a list of commands you can use with the Recovery Console, type HELP at the
Recovery Console command Prompt.

When starting up Windows 2000 / XP, there will be a boot-selection menu displayed,
where you can startup Windows or the Recovery Console :




If the default selection is to start the Recovery Console and you like to change it to start Windows,
or if you like to reduce the bootup-delay or if you like to remove the Recovery Console from
the boot-menu, you can change the default boot selection :
In the Control-Panel, select the
System icon:

(or right-click "My Computer" on the desktop
and select Properties)

Select the tab: "Advanced" and
then use in the section :
"Startup and Recovery"
the button :
"Startup and Recovery"
Select from the drop-down menu the system
to boot as default, and define a delay value
(5 sec is a good choice, allowing time to
change the default but not delaying the
boot too long ).

If you think that you do not need the
selection anymore, you can turn off the
display of the boot-menu by un-checking
"Display list of operating systems" :


If you have a Windows XP Recovery CD-ROM, then you may not have the option to select "Recovery Console".
For such cases, Microsoft have made the Windows XP setup process (to get to the Recovery Console) available as
a download via Q310994 in different languages (note: there are different downloads for the Home and Professional Edition).
You have to execute the download file, which will create 6 boot floppies. You then can boot from the first floppy :
You will get first the message : "Setup is inspecting your computer's hardware configuration..."

You will be prompted to insert the additional floppy disks :
Windows Setup

Please insert the disk labeled
Windows XP Professional Setup Disk #2
into Drive A:
Press ENTER when ready