Cannot logon interactively error through Remote Desktop

[Wodill]

I have a user that I need to remote desktop to one specific Windows 2003 member server. I want this person to be able to only log onto this server either at the console or through remote desktop connection. When they are logged on, I want them to be an adminstrator.

I've checked marked the box to allow for remtoe desktop conenction. I've added their domain account to the list of allowed users to remote. I've also added their domain account to the local administrators group on this server.

At the console, they have no problem logging in. Through a remote desktop connection, they are getting the error, "the local policy of this system does not permit you to logon interactively."

I checked the local policy of this server and the adminstrators group has permission to log on locally. I've even added the user's domain account to log on locally in the policy and still get the error.

Any ideas?

 

[aquias]

It's a group policy setting...for a user to log on interactively setup this policy on their OU...

Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Encryption and Security.

Set "Always prompt client for password upon connection" to disabled.

And then set Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignement

Make certain that the group they are a part of, are added to the "Allow Log on Locally" line of this policy