Although I've gotten this error before, it was tied to an install of the Blackberry Enterprise Server and allowing the BESAdmin account to login locally. The policy was not defined before so I had to add users to ensure all other domain users could still logon to the network. The issue with this situation is it only affects two users on the domain, everyone else can login just fine. These users are universally unable to login to any domain client pc. I've added their specific user accounts to the "allow logon locally" policy, refreshed and still a no go.
Any suggestions please!?