Last week we promoted a new DC on one of our subnets and demoted the DC that was originally on that subnet. Since then we have been receiving this message when ever we attempt to RDC to a workstation:
The local policy of this system does not permit you to logon interactively.
I have verified that the "Allow log on through Terminal Services" is enabled for the local policy and that Remote Desktop Users group is allowed. I have also forced an update using gpupdate /force command. No one can RDC not even the Administrators. I have made sure that the group of employees that need this right are part of the Remote Desktop Users group.
We can remote control these boxes using Dameware, just can't using RDC.