Users cannot connect to RDS

I have created an AD group called RDSusers and place the users that I want to give access to our Windows Server 2008 R2 Remote Desktop Server.  On the RDS server I added the AD Group RDSusers to the local group Remote Desktop Users.  The administrator works just fine.  But when a non administrator attempts to login they get the "The connection was denied because the user account is not authorized for remote login."  If I go in and manually add a specific non admin AD account to the same local Remote Desktop Users group they can get in.  If I remove them from the group they cannot.  But that user is a member of the RDSusers group which is a member of Remote Desktop Users group.  Why is the group inside a group not working????
LiberatingInsightAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

B HCommented:
the group you created, "RDSusers" - is it a security group or a distribution group?  it needs to be a security group.

also make sure the individual users in question, in AD, don't have "deny login to terminal server" checked in their user profile
0
LiberatingInsightAuthor Commented:
It is a "Security Group - Global"  The users are not set as "deny login to terminal server".  They are able to connect if I add them manually to the Remote Desktop Users group but not if they are purely a member of the RDSusers group which itself is a member of Remote Desktop Users.
0
B HCommented:
What if you add the new group, to the 'security' tab in terminal server configueation?
0
LiberatingInsightAuthor Commented:
Still no luck on this.  Any other ideas???
0
B HCommented:
i don't have an answer for why your nested group doesn't want to work...  you should at least be able to copy/paste the members from one to the other... or delete your new group and recreate it?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Project Management

From novice to tech pro — start learning today.