darka

This is what i found http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(WS.10).aspx (go to Time Service section), not sure if it applies to your problem, but might give a try. Sorry, only now realized you use Xen, cant find a way to delete this post..

Hi, Or you could just create "Remote Desktop Users" (pick a name that suits your rules) in domain add users that you want to be able to connect over remote desktop and populate new gpo in group policy that puts this group under local remote desktop users group on domain computers, you can also create another group of administrators that would be added to local admins group too. I found a link that shows exactly how to do that http://www.windowsecurity.com/articles/Using-Restricted-Groups.html.

Hello, I'm new here, but anyway i have strange problem, when joining computer in our domain. I have user 'xxxx', its regular user account and he is only member of domain users group. When i add new computer to domain this particular user becomes member of local "Offer Remote Assistance Helpers" group. Now i wasn't "there" when domain was created :) but there must be some kind of setting that made this happen. I do have security group membership setup in group policy and this user is definitively not in any of those settings, also when i remove him from that group, he doesnt appear anymore after gpudate. I did use group policy modeling wizard and it confirms that my settings should not affect "Offer Remote Assistance Helpers" membership on domain computer. So i must be missing something here.. Thanks for any help.