Situation: The user is member of domain admins. However, he can’t access his remote computer using RDP with this error: A user account restriction is preventing you from logging on
Troubleshooting: We find this user is also member for Windows Protection users group which blocks him to use RDP. Please refer to this post:
