I made a Windows 7 template, in which I modified the Group Policy with domain admin to add authority to"Allow log on locally","Allow log on through Remote Desktop Services","Access this computer from the network".
But the thing is, I still can't log-on any single one of these Windows 7 Desktops except with Domain Admin. for example, I created an account TEST1 in AD, while failed to log-on these Windows 7, which says"The requested session access is denied".
What are we supposed to do?