The connection was denied because the user account is not authorized for remote login

When you are logged into a server and you try to login to a networked workstation using a user that is one of the roaming profile users.

Try two things

in AD add them to the administrator group. If this doesnt work then log in with the cmx administrator name. If that gets in then you can alter the group policies.

Click Start > Run and type: secpol.msc

Expand Local Policies and click on User Right Assignment. This should now bring up more options in the right window of the Local Security Policy, as shown below.

Find Allow log on through Remote Desktop Services, right click on it and select Properties. You will now have the option to Add User or Group.

If this is a new server/workstation deployment you probably won’t have the Remote Desktop User Group listed. If the RDP group is already listed here, try and add the individual user that is getting the error.

Once you add the Remote Desktop Group or User then RDP should work but to be on the safe side, ensure the Remote Desktop service Logon account is the Network System and not as a local service.