"the local policy of this system does not permit you to logon interactively"

Hi,
one of the users is unable to logon to a PC at work through Remote
Desktop Connection. It connects, displays the logon screen and when
she enters her password, it says "The local policy of this system does
not permit you to logon interactively".

- She is a member of Remote Desktop Users (on top of other groups)
- When I right click on My Computer / Properties / Remote, the
checkboxes for Remote Desktop and Remote Assistance are checked. When
I click "Select Remote Users", her user id is listed under the
textbox.
_ She is part of local administrators group.
- I ran secpol.msc on her PC (at work) and made sure that "Allow logon
through terminal services" includes Remote Desktop Users. Also made
sure that "Deny logon ..." did not include Remote Desktop users.
However, "Add User or
Group" and "Remove" buttons are grayed out, so I cannot add her user
ID explicitly (for testing).
- On the server, I checked Domain Controller Security Settings and in
the "Allow logon locally" added her user id.
- Even when I try to login to her PC (through remote desktop
connection) as domain administrator, I get the same error message.

What else do I need to do to get remote desktop working!?
How can I make those "Add User or Group" and "Remove" buttons
activated on her PC at work? I don't think I need to add her
explicitly, since Remote Desktop Users is listed, but just in case ...

Thanks.

.

Quantcast