Windows Server 2012 Active Directory User can't login to Windows 10

Hi Guys,
I have added a Windows 10 Pro machine to my Windows Server 2012 domain, and it is working fine for the most part.
Now, I was testing a domain user with this machine, and at the beginning I added the user to the "Power Users"  in the local machine groups.

Now that everything seems to be Ok, I removed the domain user from "Power Users" to simple pedestrian "Users"  group in the local machine.

Now when I try to login to the domain from the Windows 10 Pro test machine, it seems like is going to login but then it says "signing out"  and that's it, I can't login.

If I remove the domain user from the local machine "Users"  group and add the domain user back to the "Power Users" group everything goes back to normal and the domain user can login to the domain from the local machine no problem whatsoever.

Any ideas why this is happening?
cargexAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lionel MMSmall Business IT ConsultantCommented:
When you say local do you mean control panel, users, then "manage other user accounts"? Can you logon with another user, without adding it to any local groups?
cargexAuthor Commented:
When I say "local"  I mean local to the client computer (Windows 10 Pro), which is open "computer management", select "Local Users and Groups", double click the Group that I want to modify (Administrators or Power Users) and then I add the domain user to that group.

So far if the domain user belongs to ...
Administrators: can log in without any issues
Power Users: can log in without any issues

Users: The user can't login at all.

Is there a group in between "Power Users"  and "Users"  that I can use?
Lionel MMSmall Business IT ConsultantCommented:
is this a problem for all users in the "users" group? No there is no other option between Users and Power Users -- if there are additional items you want to restrict power users from you would have to do it thru group policy

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cargexAuthor Commented:
Thank you Lionel,
I think your suggestion is the best way to proceed.
I will add the domain user to the "Power Users" group and create further restrictions using GPOs.
Lionel MMSmall Business IT ConsultantCommented:
glad to help--have a great day
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.