The Request Session Access Is Denied Server 2008 R2

I have been using my TS for 2 Yrs, 20 users, no problem. i had to do a clean install on my TS.

on the grp policy, Computer\Window\security\local\user righs\allow log on through rdp. i added remote desktop users, terminal server users, my domain users.
I know i don’t need to add all of these, but nothing is working.

i can log on as administrtor, and the only way a user can log on is if i add them to the DOMAIN ADMIN GROUP.