A citrix metaframe xp server running terminal services in our network with another win2k sp4 server both running as DC’s is not permitting “log on locally” rights to the thinclients sessions unless the user logs on as admnistrator. I have researched the issue heavily and thought I had it nailed down by creating an OU called “terminal server” and moving the Citrix server there” then creating a group policy called “terminal users” with rights to “log on locally”. I then added the needed users to the “terminal users” group. Users still receive error “Local policy of this system does not permit you to logon interactively”. Can someone point out the snafu I am making?
