Users still can not log on to Terminalserver although "allowed to log on through terminal services"
Default Domain Group Policy is not configured
I just ran into this problem - even without Citrix Presentationserver (CPS 4.5) implemented yet:
Testenvironment (Single Domain, W2k3SR2, IE7), almost everything plain out of the box.
There are all the usual break-your-neck with local security "allow log on through terminal services", remote desktop user group and all this stuff, but I still had this error message...
Looking at the (default!) Default Domain Policy in GPMC I found out, remote desktop users are blocked out.
So, also lookup your Default Domain Policy, it lets you select blank passwords, but a user's not allowed to log on over Terminal Services.
About the Author
Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux in different European countries and different European languages. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform where he is one of the most important contributors and the main developer.