I've got an issue that has been going on with my domain since before my arrival that I am finally getting around to fixing. The issue is that users are unable to logon to domain workstations unless A) The user is added manually to the system and B) is configured as a local admin. So -
* Domain users cannot logon to workstations unless added manually and must be added as a local admin, not a standard user.
*Domain admins CAN logon to systems that they are not manually added to, which is expected
I have gone through the various GPO's and cannot find anything that would prevent users from doing this. I know that by default the users should have this ability. I have also checked to ensure that each user is configured to be able to log onto any system with the "Log on to.." setting under their account.
Any ideas?