Make sure that the Remote Desktop Users group has sufficient permissions to log on through Terminal Services.
- Click Start, click Run, type secpol.msc, and then click OK.
- Expand Local Policies, and then click User Rights Assignment.
- In the right pane, double-click Allow logon through Terminal Services. Make sure that the Remote Desktop Users group is listed.
- Click OK.
- In the right pane, double-click Deny logon through Terminal Services. Make sure that the Remote Desktop Users group is not listed, and then click OK.
- Close the Local Security Settings snap-in.
Make sure the user is added to the Remote Desktop Users group:
- Open Computer Management.
- In the console tree, click the Local Users and Groups node.
- In the details pane, double-click the Groups folder.
- Double-click Remote Desktop Users, and then click Add….
- On the Select Users dialog box, click Locations… to specify the search location.
- Click Object Types… to specify the types of objects you want to search for.
- Type the name you want to add in the Enter the object names to select (examples): box.
- Click Check Names.
- When the name is located, click OK.
Check the users or groups to Terminal Services RDP permissions:
- Open Terminal Services Configuration.
- In the Connections folder, right-click RDP-TCP.
- Click Properties.
- On the Permissions tab, click Add, and then add the desired users and =
groups.