On a Small Business Server 2008 install:
To log on to this remote computer, you must be granted the Allow log on
through Terminal Services right. By default, members of the Remote Desktop
Users group have this right. If you are not a member…
Conditions:
1. Users have been added to remote desktop users group already
2. Users are standard users and are not enterprise admins, etc.
Fix:
1. Start > Run > type “mmc” press enter
2. Press ctrl+m > select “Group Policy Management Editor” > click add
3. Window opens > click browse > double click “default domain policy” > click finish, then OK
4. Expand “Default Domain Policy” (click on plus sign) > Expand “Computer Configuration”
5. Expand “Policies” > Expand “Windows Settings” > Expand “Security Settings”
6. Expand “Local Policies” > Click “User Rights Assignment”
7. Double click “Allow log on through Terminal Services”
8. Check the box “Define these policy settings” > Click “Add User or Group” > Click “Browse”
9. Type in “Remote Desktop Users” > Click “Check Names” (Remote Desktop Users will become underlined)
10. Click “OK” > Click “OK” > Click “Apply” > Click “OK” > Close Console1/MMC
11. Force group policy update by start > run > type in “gpupdate” > click ok
12. Try to log in using MSTSC, etc.
Also you can go a different shorter route…
Start->Programs->Admin Tools->Local Security Policy. Expand the folders to the following Security Settings\Local Policies\User Rights Assignment …. etc
