6

On XP, the Guest account can run the RDP client to connect to a remote RDP server, but when I try the same under Vista Business (with all updates installed) I get this:

Error

I can run mstsc manually with 'Run' on the Start Menu, but although it runs, nothing happens at all when I click 'connect'.

Everything works fine logged in as any other account, it only fails as 'Guest', and this is on multiple clean installs of Vista.

Is there something in the Local Policy that can be tweaked to allow the RDP client as Guest?

edit: there is also a message in the rdp client itself:

enter image description here

and I get this error when trying rdp+:

enter image description here

Mokubai
  • 95,412

3 Answers3

1

I've given up trying to find a solution and I'm using a workaround instead. Seeing as these machines are locked down and only required to run Remote Desktop Client, I'm comfortable with this being a bit of a hack:

  1. Create normal (limited) user called MYUSER (or whatever)
  2. Set everything up in the profile the it needs to be (eg link to .rdp file)
  3. As admin, copy C:\Users\MYUSER\NTUSER.DAT to C:\Users\Default (overwrite destination)
  4. Rename C:\Users\MYUSER\NTUSER.DAT to C:\Users\DASH\MYUSER.DAT.MAN

Basically this forces a temporary profile to be used on every login, and this profile comes from C:\Users\Default. The effect is that any changes a user makes while logged in are discarded when logging out.

0

I can't replicate this situation but please, try this:

Local Security Policy -> Applicatio Control Policies -> AppLocker -> Executable Rules -> Create new rule...

Create rule exception for Guest to lunch %SYSTEM32%\mstsc.exe file.

Diodak
  • 154
0

To allow Guest to use remote logon, one needs to add the Guest account to the Remote Desktop Users group, as described in the article Configure the Remote Desktop Users Group.

  1. Start the Control Panel -> System
  2. Click the Remote tab
  3. Under "Remote Desktop" click the "Select Users..." button
  4. Click Advanced
  5. Click Find now
  6. Scroll down and double-click on Guest
  7. Click OK all the way out

Giving these permissions to the Guest account may be a security risk.

Another idea: Try to sign the .rdp file with a trusted certificate.

harrymc
  • 498,455