Remote Desktop Connection Privilege Issue

Question

I have two Windows 7 computers on a network, a desktop and laptop. I am trying to connect to the desktop via RDP from the laptop. I enter all the necessary information to connect and it fails to login, yielding the message:

To log on to this remote computer, you must be granted the Allow log on through Terminal Services right. By default, members of the Remote Desktop Users group have this right. If you are not a member of the Remote Desktop Users group or another group that has this right, or if the Remote Desktop Users group does not have this right, you must be granted this right manually.

However, the user I am trying to log in as is a member of the "Remote Desktop Users" group and the "Administrators" group. Both groups are given the "Allow logon through Remote Desktop Services" right. I even tried directly giving the user the "Allow logon through Remote Desktop Services" right. I still encounter the message and cannot log in. I have also tried running gpupdate and restarting N+1 times to no avail.

Why would the RDP service be giving that message if the user in question has the proper rights? How would I go about fixing this? And if it is not an obvious fix, how would I go about gathering more information?

Answer 1

Use gpedit.msc to check the policy (source):

1. Start > Run > gpedit.msc.
2. Expand: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Management
3. Select: Allow log on through Remote Desktop Services.
4. Add Remote Desktop Users to the Policy.
5. To apply the changes: Start > Run > gpupdate /force.

EDIT: As per this answer, there is also a Deny log on through Remote Desktop Services option, ensure that the user/group is not included in that policy.