Event ID 1007 — TS Web Access Computers Security Group Configuration

Applies To: Windows Server 2008 R2

The RemoteApp and Desktop Connection Management service uses the TS Web Access Computers security group on the RD Connection Broker server to control access to who can communicate with the service. The TS Web Access Computers group must exist and be populated with the appropriate members.

Event Details

Product: Windows Operating System
ID: 1007
Source: Microsoft-Windows-RemoteApp and Desktop Connection Management
Version: 6.1
Symbolic Name: TSCPUBSVR_RPC_SEC_NO_ACCESS
Message: Client machine %1 is not authorized to access the Remote App and Desktop Management Service. Check that the machine has been added to the TS Web Access Computers security group on %2.

Resolve

Add the RD Web Access server to the TS Web Access Computers group

To resolver this issue, you must add the RD Web Access server to the TS Web Access Computers group on the RD Connection Broker server.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To add the RD Web Access server to the TS Web Access Computers group on the RD Connection Broker server:

  1. On the RD Connection Broker server, open Server Manager. To open Server Manager, click Start, point to Administrative Tools, and then click Server Manager.
  2. Expand Configuration, expand Local Users and Groups, and then click Groups.
  3. Right-click TS Web Access Computers, and then click Add to Group.
  4. Click Add.
  5. Click Object Types, select the Computers check box, and then click OK.
  6. In the Enter the object names to select box, type the name of the RD Web Access server, and then click OK.
  7. Close OK to close the TS Web Access Computers dialog box.

If this does not resolve the issue and you are using a non-Microsoft application, ensure that the credentials being used to make the remote procedure call in the application are members of the TS Web Access Computers group on the RD Connection Broker server.

Verify

To verify that the TS Web Access Computers security group exists and is populated correctly, do the following:

  • Verify that the RemoteApp and Desktop Connection Management service is started.
  • Log on to the RD Web Access server that is configured to use the RD Connection Broker server.

Verify that the RemoteApp and Desktop Connection Management service is started

The RemoteApp and Desktop Connection Management service is used to communicate with the RD Session Host and RD Virtualization Host servers on your network.

To verify that the RemoteApp and Desktop Connection Management service is started:

  1. On the RD Connection Broker server, open the Services console. To open the Services console, click Start, point to Administrative Tools, and then click Services.
  2. Locate the service named RemoteApp and Desktop Connection Management.
  3. Verify that the Status column for this service displays Started.
  4. After you have verified that the RemoteApp and Desktop Connection Management service is started, log on to the RD Web Access server as outlined in the section "Log on to the RD Web Access server that is configured to use the RD Connection Broker server."

Log on to the RD Web Access server that is configured to use the RD Connection Broker server

The RD Web Access server that is configured to use the RD Connection Broker server must be available to communicate with the RD Connection Broker server.

To log on to the RD Web Access server that is configured to use the RD Connection Broker server:

  1. On the RD Web Access server, open Remote Desktop Web Access Configuration. To open Remote Desktop Web Access Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Web Access Configuration.
  2. In the Domain\user name box, type a valid domain and user account name.
  3. In the Password box, type the password for the user account.
  4. Verify that you can successfully log on to the RD Web Access server by using Remote Desktop Web Access Configuration.

TS Web Access Computers Security Group Configuration

Remote Desktop Services