We have this problem on all our XP workstations.

All users are "Power Users" on their workstations.

The users have the "Deny this user permissions to log on to any Terminal
Server" attribute checked in Active Directory because they do not need to
remotely logon to any computers.

If our help desk connects to a workstation using RDP and then logs off, the
user then cannot logon.

They receive the following message:

"Your interacitve logon privilege has been disabled. Please contact your
system administrator"

A local administrator has to logon/logoff locally, or the workstation has to
be rebooted before the user can logon again.

If I uncheck the "Deny this user permissions to log on to any Terminal
Server" attribute in Active Directory for the user, they can logon locally,
after a RDP session, with no problems.

But, we do not want to allow the users any remote logon rights.

It looks like the "Deny this user permissions to log on to any Terminal
Server" attribute in Active Directory is being applied to local users, even
after the RDP session has ended.

Any help with resolving this issue is greatly appreciated.

Thank you.

Charles