jonno112

I have 5 systems all running XP SP2 connected to a single domain server (2003) that all get the above message.

I can log on locally with the admin account but the standard domain user gets the above error.

I can also remotely log in with the domain user account.

All was working before i left for holidays and the last thing i did was update the antivirus.

Any help appreciated.

Tulips

Windows displays this error message if the user who\'s logging lacks the necessary permissions to log in using the Remote Desktop Protocol (MSTSC). You can correct the problem by adding Remote Desktop User account to \"Allow Logon to terminal services\"Remote Desktop Users group.

Tulips

Right click MY computer-----> goto properties---> select remote--->select remote user's---> add remote desktop user account

jonno112

I just checked the domain policy and the users are in there to allow the use of remote desktop.

I will try and add the domain users account as well and see what happens.

jonno112

It did,nt work any other ideas??

jonno112

Under the default domain controller security settings under the settings of allow logon locally the domain users has been added.

However under the default domain policy i see the setting local policy / User rights assignment The 2 settins are

Allow log on locally Admin
Deny logon locally Domain users

I am a little confused about this does this mean log onto the local computer or the DC.

And is there a conflict here?

jonno112

OK I dont know why local was set but i have removed it from the default group policy and all is back to normal.

The only question is how did it set itself to deny?

Thank for your help