Grant Access to a Telnet Server

Applies To: Windows 7, Windows 8, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Vista

Before users can connect to your Telnet server, you must allow access by adding their user accounts to the TelnetClients group on the Telnet server.

The TelnetClients group is created automatically when you install the Telnet Server service. On domain controllers, the TelnetClients group is created as a Domain local group.

By default, no one is a member of the group and only members of the local Administrators group can successfully Telnet Client to reach the computer.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

Granting access to a Telnet server

To grant permission for Telnet users to access your Telnet server, use the following procedure:

  • Add users to the TelnetClients group

After the TelnetClients group is created, you can add members to it. Any member of this group can access the Telnet Server service. The tasks they can perform while connected using Telnet depends on the permissions and rights granted to the user account on the server computer and the resources it hosts.

To add users to the TelnetClients group

  1. Open the Local Users and Groups snap-in. In the Start Search box, type mmc lusrmgr.msc.

    On a domain controller, open Active Directory Users and Computers

  2. In the navigation pane, click Groups.

    On a domain controller, expand your domain and click Users.

  3. In the details pane, right-click TelnetClients, and then click Properties.

  4. In the TelnetClient Properties dialog box, click Add.

    On a domain controller, click the Members tab, and then click Add.

  5. In the Select Users, Computer, or Groups dialog box, add the users or groups to whom you want to grant access. For information about how to find and add users or groups, press the F1 key to see Access Control List Help.

Note

You can add groups as well as individual users. For example, if the main purpose of the computer is to perform as a Telnet server, you might want to add the group Everyone, or Authenticated Users, rather than individually adding every user account on the computer.

  1. When all of your users and groups are added, click OK to save your changes.

  2. Close Local Users and Groups, or Active Directory Users and Computers on a domain controller.

Additional considerations

  • If User Must Change Password at Next Logon is set for a user account, an attempt to log on to the Telnet server by using Telnet Client results in failure. The user must log on to Windows directly, change the password, and then reattempt to log on to the Telnet server by using the new password.

Additional references

See Also

Concepts

Enable the Telnet Server Service
Configure Telnet Server Authentication
Configure Telnet Server to Allow Administrator Access by using Password Authentication
Configure the Command Interpreter Used by the Telnet Server
Configure the TCP Port Number Used by Telnet Server
Configure Idle Session Timeouts for Telnet Sessions
Configure the Number of Simultaneous Sessions Supported
Configure the Domain Used for User Name Authentication