local policy does not permit logon interactively 1

[Pccoordinator]

after joining to domain server client machine get above mssg when logging on to domain server
doesn't matter what machine I log in from
so far the only way I've found to fix is to make user a Domain Admin which is not acceptable

 

[porkchopexpress]

Check to see if the domain users group is being removed from local users by a domain policy.

It's probably a restricted groups policy that only allows certain groups to logon locally.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html