For some reason, I have been completely unable to log one of my users in through TS. The user is a member of the Remote Desktop Users group, and remotes in to her local machine via VPN almost daily. When I tried logging her into one of my servers I started getting the “must have logon through terminal services” gripe from windows. I checked the policy and sure enough the Remote Desktop Users had permission to log on through TS. I tried removing her from that group and re-adding her. No good. I tried removing and re-adding the group to the permissions. No good. I finally added a different group she’s a member of to see if that would make a difference. Now I get a different gripe, something about “Terminal Server user access permissions”. So, I go into the TS configuration and add her other group to the permissions there. Bingo! I’m in!
Any idea why in the world the server would deny rights to an explicitly allowed, default, group? I double-checked to make sure nothing was set in “Deny logon through terminal services”. It’s enough to make me want to add some additional .45 ventilation to the bastard.