Remote Desktop not working for users

[Sheridan]

We use RDP to login to PCs across the site, and also use a 'test' staff and student account as well. Since the XP days this has been defined through group policy settings and has worked fine. We've now noticed that it doesn't seem to be working on the Windows 7 Machines - for the non admin accounts anyway.

 

If we try to RDP to one of these machines as the test Staff account we get and error "The connection was denied because the user account is not authorized for remote login". On that machine running RSOP shows that RDP is enabled, and the specified users are allowed to login via RDP in the 'Allow log on through Remote Desktop Services' in User Rights Assignment.

 

So all looks correct from the Group Policy point of view, but if you view Computer Properties/Advanced/Remote the option to enable/disable is greyed out (due to it being defined by GPO's) and the list of users is empty!

 

There is no conflicting policy, and this has worked for years on our XP clients so is there an issues with setting up RDP with GPO's in Windows 7?

[Sheridan]

Typical - as soon as I post that I find out what I'd done wrong!

 

The Restricted Groups Policy needed to be configured as well, with Remote Desktop Users being added and the users then added to that!