User credentials are different to Logged on user account when accessing Windows 2003 Server over Remote Desktop

Hello Experts,

I have an unusual situation occurring when I am logging on a user over Remote Desktop.
I am not sure if anything can be done to solve the issue, but perhaps someone could explain why this is happening?
I aplogise for the detailed explanation below but I hope it helps to clarify what is happening!!


The current network setup is as follows:
There is a 2003 Small Business Server Premium Ediiton on domain.local.
This server also has MS Virtual Server 2005 installed and I have a Guest 2003 Server Standard edition installed on the Virtual Server, also joined to domain.local as a member server.

I have a user who is currently logging onto the domain successfully as 'username'.

I am setting up this same user to access the guest server over remote dekstop, loggin on as 'username_remote'.
Username_remote has a roaming profile located in a network share \\sbsserver\user_profiles$\username_remote and folder redirection to \\sbsserver\user_folders$\username_remote.
The roaming profile is configured in the User Properties\Profile\Profile path as \\sbsserver\user_profiles$\username_remote.

The folder redirection is applied to a Folder Redirection Group using a Group Policy called Folder Redirection Policy under User Configuration\Windows Settings\Folder Redirection\ for Applicatino data, Desktop, MyDocuments and Start Menu, all pointing to \\sbsserver\user_profiles$\username_remote.
The user is then made a member of the Folder Redirection Group.

I have also created a Group Policy called Remote Access Policy which is applied to a Group called Remote Access Group.
This policy configures many aspects of the username_remote workspace when logged in as username_remote.
Username_remote is a member of this group.

The outcome I desired when username_remote logged on was that user would log on and the GPOs be applied and set the workspace accordingly.
This is in fact what happens, to start with, before I start configuring programs, in particular MS Outlook.

However, things change when I have configured the MS Outlook client to connect to the SBS Exchange Server.

Because I wish user and username_remote to access the same mailbox, I configure Outlook in the remote profile to access the username mailbox.
This is not a problem in itself and works fine, up to a point.
When username_remote logs on and opens Outlook he is prompted for a username and password, which are username and username's password.

The problem starts when username_remote ticks the option to 'Save the password'.

Now when username_remote finishes his session logs off and then logs on again, the profile has changed.
Oultlook now opens without prompting for credetials for username.

I could see that now the Remote Access Policy did not appear to be applied, giving username_remote a different profile and workspace.

I spent ages trying to figure out what was going wrong.
I checked the Group Policy Results in GP Management and sure enough the Remote Access Policy was NOT being applied.
I deleted and recreated the user account, created additional user accounts applying the same procedure, and everytime I configured MS Outlook the profile would change.

I then looked at what was happening in the Event Viewer of the Guest Server.
The Security Events showed where the problem was:

When username_remote logged on, BEFORE MS OUTLOOK IS CONFIGURED, the follwing events occured:
Event ID: 528,
Type: Succes A,
Successful Logon,
User Name: username_remote

Now AFTER MS OUTLOOK HAS BEEN CONFIGURED, the following events occured at logon:
Event ID: 528,
Type: Success A,
Successful Logon,
User Name: username_remote

Event ID:552,
Type: Success A,
Logon attempt using explicit credentials:
Logged on user: User Name: username_remote
User whose credentials were used:
Target User Name: username

So, what I deduce from this is, username_remote is logging on to the Domain Controller, then username is logging onto the Exchange Server before the Remote Access Group Policy is being applied.

After all that, I suppose my questions are:

1. Does this make sense?!!!
2. Is this how it should work?
3. Is it possible to keep the mailbox the same for these two different users and make this work, without the danger of the profile getting changed?