Question : Must Have Terminal Server User Access Permissions--Error

Presentation Server 4.0 running on Server 2003 SP1 also is our Terminal Server License Server.  We have 3 remote locations connected via site-to-site VPN’s.  DC is 2000 SBS.  One clarification I need to make is, I installed Citrix on the remote client before the site-to-site VPN was working.

The Citrix icon on the task bar shows “Citrix Program Neighborhood – Not Connected”

I used the “Custom ICA Connection” in Program Neighborhood and created a Connect By Published Application session.  When I tried the connection, it errored out (see error below); didn’t matter if I logged on as admin or user.  I have made sure that the users belong to Remote Desktop Users group AND Allow log on Trough Terminal Services rights are assigned.  I have also made sure permissions are set through Connections in Terminal Services Configuration (both Microsoft RDP and Citrix ICA 3.0), also Citrix Connection Configuration (which looks like the same thing to me).  From the Citrix Management Console, I have set the farm “Connection Access Control” property to “any connection”, the published application “Access Control” property to “Allow connection through Metaframe…”, “Any connection”, and “Allow all other connections”.  

ERROR DIALOG
“To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group another group that has these permissions, you must be granted these permissions manually.”

Folks this is betting the snot out of me!


I used the “Custom ICA Connection” in Program Neighborhood and created a Connect By Server session.  When I connect with admin rights it brings up a RDP session just fine, but if I try to loin to the domain as a domain user I get two error dialogs.
ERROR DIALOGS
1.The desktop you are trying to open is currently available only to administrators. Contact your administrator to confirm that the settings are in place for your client connection.
2.To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group another group that has these permissions, you must be granted these permissions manually.

Help me…Please

Answer : Must Have Terminal Server User Access Permissions--Error

1) Publish the application to a specific AD group (I assume that's done.)
2) When logged in as a user in the group specified in #1, open Program Neighborhood and go to the Application Set Manager, Find New Application Set, and run through the wizard to connect to your particular farm.
3) Run the application from the icon that is found in the newly created Application set.

This worked for me. The procedure I was doing prior to that was creating a custom ICA connection and attempting to connect to the application that way.