Are Only Domain Admins Allowed to Log In to XP Mode?

[michbell]

Anybody know why I can't sign in to XP Mode with anything other than a domain admin account.

I have a pc with Windows 7 Professional that I'm setting up for a user. In order to continue to use a really old program that they need, I set up XP Mode (while I was signed in to the computer under their user account). It was very easy to set up, and I'm able to sign in to XP Mode with the local user account that was created while setting it up.

However I would like to be able to join this virtual machine to our domain so that it is subject to the same group policies, among other things. But after I add the vm to the domain, I am only able to sign in to it with accounts that are domain admins. If I try signing in to the vm with a non-domain admin account, it gives me this error on the log in screen "The local policy of this system does not permit you to logon interactively."

I've tried making the user a local administrator on the physical pc and on the virtual one, I've added that user account for remote access on both, added the user to the domain remote access group, I've tried creating a test user account that doesn't have any group policies applied to it and have added that one to all the same groups, but nothing works unless I make the user a domain admin.

Am I doing something wrong or is this a really bad limitation of XP Mode??? Any help would be greatly appreciated.

 

[michbell]

Nevermind - I found the culprit. The default domain policy was specifying only a couple groups with the permission "Allow logon through Terminal Services". Got there by following these instructions from this site:

http://forums.techarena.in/small-business-server/623448.htm

1. Click Start, click Run, type secpol.msc, and then click OK.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Allow logon through Terminal Services. Make sure that the Remote Desktop Users group is listed.
4. Click OK.
5. In the right pane, double-click Deny logon through Terminal Services. Make sure that the Remote Desktop Users group is not listed, and then click OK.
6. Close the Local Security Settings snap-in.