I have created a new domain user on a v. small domain with just one server which is a DC and a TS. Some time back I set up one user to access TS. This works fine although I recall that I had a problem getting it to work initially - I wish I could remember how I resolved it as now I can't get a second user to log on.....
I have set up all the user settings in ADUC identically e.g. they are both members of the Remote Desktop group and neither are administrators, but i still get the error:
"To log on to this computer, you must be granted the Allow log on through Terminal Services right etc."
I can't think what else there is to do as the other user works fine.