Hi, I want a non domain admin user connect with RDP to domain controler. Here is what I do: My Domain Security Policies is as follow: All log on locally: Account Operators Administrators Backup Operators Print Operators Remote Desktop Users Server Operators Allow log on through Terminal Services: Administrators Remote Desktop Users I add my user to the Remote Desktop Users group. I can logon locally on the DC but not with RDC I have this error To log on to this remote computer you must be granted the allow log on through Terminal Services. The remote desktop is actived on this PC, I also add the user in the allowed user. I do a gpupdate /force and I reboot the DC. Thanks for your help DS