Thanks for responding, but that did not work.  I still get 'Access is Denied' 


I just ran into this issue and was able to resolve it by setting the Remote Desktop Services service logon to Network Service. It was set to LocalSystem.

When reviewing the system logs, I found the following two errors:

The Remote Desktop Services service is marked as an interactive service.  However, the system is configured to not allow interactive services.

and

36888

 Schannel N/A NT AUTHORITY\SYSTEM The following fatal alert was generated: 10. The internal error state is 10.

I also was thinking about resetting the machine account password with the netdom command but, didnt end up needing to.

Here are my notes from the issue - just in case you are seeing a combination of problems.

We are getting an "Access is Denied" message when trying to RDP into a Windows Foundation Server 2008 R2 system. To eliminate external access issues, we are trying to just RDP into localhost at this point. We do get the same message when trying from a remote system.

Items that we have confirmed at this point:

  • Apparantly this did work one time and ever since then it hasnt worked (no way to confirm this).
  • New user account "TestUser" is a member of the remote deskop users group and administrators group (have tested with just admin / Remote desktop users group only as well)
  • No profile issues exist
  • Server is only a member of a workgroup
  • TestUser account in the "allow logon through terminal services" Local Security policy
  • All firewall settings are disabled
  • Server is listening on port 3389
  • C:\ permissions are at default settings
  • We have tried the "restrict each user to a single session" in both settings
  • Network Level Authentication is disabled for the connection
  • Security layer - tried both negotiate and rdp security layer
  • Encryption level both Client Compatible and Low
  • Remote control settings are set to Use remote control with default user settings.
  • Server is in Remote Desktop for Administration Licesing mode
  • We have deleted and re-created the RDP-TCP connection.
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\ create a DWORD value called “IgnoreRegUserConfigErrors” and assign the value “1” to this property (also tried 0)
  • we also applied kb 951422 for new termserv.dll, rdpcorekmts.dll, and rdpwsx.dll files



After reading again your post I just set the Remote Desktop Services service logon to Network Service. Now it works fine. 



Thanks, Thanks a lot for the resolution. It worked for me. 



Fonte: https://social.technet.microsoft.com/Forums/windows/en-US/8405bed7-57a8-4b54-b968-6b0e00f367dd/access-is-denied-remote-desktop?forum=winserverTS