Users cannot connect to RDS

I have created an AD group called RDSusers and place the users that I want to give access to our Windows Server 2008 R2 Remote Desktop Server.  On the RDS server I added the AD Group RDSusers to the local group Remote Desktop Users.  The administrator works just fine.  But when a non administrator attempts to login they get the "The connection was denied because the user account is not authorized for remote login."  If I go in and manually add a specific non admin AD account to the same local Remote Desktop Users group they can get in.  If I remove them from the group they cannot.  But that user is a member of the RDSusers group which is a member of Remote Desktop Users group.  Why is the group inside a group not working????
LiberatingInsightAsked:
Who is Participating?
 
B HConnect With a Mentor Commented:
i don't have an answer for why your nested group doesn't want to work...  you should at least be able to copy/paste the members from one to the other... or delete your new group and recreate it?
0
 
B HCommented:
the group you created, "RDSusers" - is it a security group or a distribution group?  it needs to be a security group.

also make sure the individual users in question, in AD, don't have "deny login to terminal server" checked in their user profile
0
 
LiberatingInsightAuthor Commented:
It is a "Security Group - Global"  The users are not set as "deny login to terminal server".  They are able to connect if I add them manually to the Remote Desktop Users group but not if they are purely a member of the RDSusers group which itself is a member of Remote Desktop Users.
0
 
B HCommented:
What if you add the new group, to the 'security' tab in terminal server configueation?
0
 
LiberatingInsightAuthor Commented:
Still no luck on this.  Any other ideas???
0
All Courses

From novice to tech pro — start learning today.