Last Logon Information Preventing Remote Desktop Connection
Our recent changes enforced by our security department had me enable the following setting in our GPO:
Computer Configuration > Windows Components > Windows Logon > Display information on previous logons = Enable
Since then (more than 24 hours now) I am able to logon to the computers and servers locally but when I try to Remote Desktop to them I get the following message:
"Security policies on this computer are set to display information about the last interactive logon. Windows could not retrieve this information. Please contact your network administrator for assistance."
I can't figure out how to be able to Remote Desktop back to the machines and servers. The system has the setting for Restricted Admin mode for Remote Desktop which was another setting we were supposed to enable but I am not sure if that is what is causing the problem.
Environments is 4 Windows Server 2008 R2 Servers. 9 Windows 7 Professional x64s all on the same domain.
Has anyone else run into this problem and know how to fix it?
UPDATE 1: I have a theory. Domain Controllers and computers have been applied. I have logged into the Domain Controller locally. But when I Remote Desktop to it I get the message.
My theory I am running on is the with Remote Restrict Administration Mode on it isn't passing the credentials as an interactive logon so it doesn't know what dates to show for what user.
Which would be a flawwwww in Windows Thinking if both setting were enabled.
windows-7 login windows-server-2008-r2 group-policy
asked Jan 16 at 15:46
JukEboXJukEboX
265213
add a comment |
Our recent changes enforced by our security department had me enable the following setting in our GPO:
Computer Configuration > Windows Components > Windows Logon > Display information on previous logons = Enable
Since then (more than 24 hours now) I am able to logon to the computers and servers locally but when I try to Remote Desktop to them I get the following message:
"Security policies on this computer are set to display information about the last interactive logon. Windows could not retrieve this information. Please contact your network administrator for assistance."
I can't figure out how to be able to Remote Desktop back to the machines and servers. The system has the setting for Restricted Admin mode for Remote Desktop which was another setting we were supposed to enable but I am not sure if that is what is causing the problem.
Environments is 4 Windows Server 2008 R2 Servers. 9 Windows 7 Professional x64s all on the same domain.
Has anyone else run into this problem and know how to fix it?
UPDATE 1: I have a theory. Domain Controllers and computers have been applied. I have logged into the Domain Controller locally. But when I Remote Desktop to it I get the message.
My theory I am running on is the with Remote Restrict Administration Mode on it isn't passing the credentials as an interactive logon so it doesn't know what dates to show for what user.
Which would be a flawwwww in Windows Thinking if both setting were enabled.
windows-7 login windows-server-2008-r2 group-policy
asked Jan 16 at 15:46
JukEboXJukEboX
265213
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56
add a comment |
Our recent changes enforced by our security department had me enable the following setting in our GPO:
Computer Configuration > Windows Components > Windows Logon > Display information on previous logons = Enable
Since then (more than 24 hours now) I am able to logon to the computers and servers locally but when I try to Remote Desktop to them I get the following message:
"Security policies on this computer are set to display information about the last interactive logon. Windows could not retrieve this information. Please contact your network administrator for assistance."
I can't figure out how to be able to Remote Desktop back to the machines and servers. The system has the setting for Restricted Admin mode for Remote Desktop which was another setting we were supposed to enable but I am not sure if that is what is causing the problem.
Environments is 4 Windows Server 2008 R2 Servers. 9 Windows 7 Professional x64s all on the same domain.
Has anyone else run into this problem and know how to fix it?
UPDATE 1: I have a theory. Domain Controllers and computers have been applied. I have logged into the Domain Controller locally. But when I Remote Desktop to it I get the message.
My theory I am running on is the with Remote Restrict Administration Mode on it isn't passing the credentials as an interactive logon so it doesn't know what dates to show for what user.
Which would be a flawwwww in Windows Thinking if both setting were enabled.
windows-7 login windows-server-2008-r2 group-policy
asked Jan 16 at 15:46
JukEboXJukEboX
265213
Our recent changes enforced by our security department had me enable the following setting in our GPO:
Computer Configuration > Windows Components > Windows Logon > Display information on previous logons = Enable
Since then (more than 24 hours now) I am able to logon to the computers and servers locally but when I try to Remote Desktop to them I get the following message:
"Security policies on this computer are set to display information about the last interactive logon. Windows could not retrieve this information. Please contact your network administrator for assistance."
I can't figure out how to be able to Remote Desktop back to the machines and servers. The system has the setting for Restricted Admin mode for Remote Desktop which was another setting we were supposed to enable but I am not sure if that is what is causing the problem.
Environments is 4 Windows Server 2008 R2 Servers. 9 Windows 7 Professional x64s all on the same domain.
Has anyone else run into this problem and know how to fix it?
UPDATE 1: I have a theory. Domain Controllers and computers have been applied. I have logged into the Domain Controller locally. But when I Remote Desktop to it I get the message.
My theory I am running on is the with Remote Restrict Administration Mode on it isn't passing the credentials as an interactive logon so it doesn't know what dates to show for what user.
Which would be a flawwwww in Windows Thinking if both setting were enabled.
windows-7 login windows-server-2008-r2 group-policy
windows-7 login windows-server-2008-r2 group-policy
asked Jan 16 at 15:46
JukEboXJukEboX
265213
asked Jan 16 at 15:46
JukEboXJukEboX
265213
edited Jan 16 at 21:21
JukEboX
asked Jan 16 at 15:46
JukEboXJukEboX
265213
asked Jan 16 at 15:46
JukEboXJukEboX
265213
asked Jan 16 at 15:46
JukEboXJukEboX
265213
265213
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56
add a comment |
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1394997%2flast-logon-information-preventing-remote-desktop-connection%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1394997%2flast-logon-information-preventing-remote-desktop-connection%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Can you confirm your domain's functional level? From the GPO help text: "For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level."
– Doug Deden
Jan 16 at 15:58
Also, make sure the GPO is applied to all domain controllers. See: serverfault.com/questions/938724/…
– Doug Deden
Jan 16 at 15:59
@DougDeden Funcational level of the Domain is Server 2008 R2. And yes the GPO is applied to the Domain Controllers because when I log in to them locally I get the correct Last login information as stated in the information above.
– JukEboX
Jan 16 at 17:56