question

Okay, So
1. Add user through Computer Management
2. Assigned user to various custom groups IE. group "No Access to Private" etc... included in these groups is "Remote Desktop User" (For the past several years all users where added this way. with not a problem).
3. Then from a remote computer you would RDS to the server and the server will prompt you for your credentials
4. After entering your credentials it will attempt to log you in, but immediately after that will kick you out.
5. I found out by trial that if I elevate the "user" to "power user" it would let him in and it would create his profile
6. After the "user" logged in. the desktop appear but nothing work meaning all the apps including the ones on the task bar didn't work.
7. I've noticed that in the registry it would create two profiles one was .bak I think this was created before he was upgraded to "power user".
8. nothing has changed in the policies local or group. registry profiles look the same.
9. All these started to happened since January this year's updates tried to reversed the updates but, some couldn't be undone and others where reinstalled.
10. Last week all users where kicked out and no one could get in after the last update.
11. I still done know what was the cause. I did repaired where all the Remote and local users could get back in.
12. but the new user still doesn't work. a.>As Std user she gets kicked out. b.> As a Power User she can get in but nothing works.

Part -1 of 2
For the last 6 years till this years updates everything worked this way.

1.> open: Computer Management.
2.> Select Local Users and Groups
3.> Right Click on Users select add new user.
4.> Enter credentials and create.
5.> Select new user created and assigned to company groups ( the same as 90% of employees) including Remote Desktop users group.
After above steps>
From my PC using Microsoft RDS connect to the server via remote access:

6.> Enter new user credentials at the RDS App prompt. USER ID and PSWD.

(before after this the user gets logged in and his desktop is created) Now! after it you hit enter it creates the desktop and then gets kicked out right away this happens at a blink of an eye.

later I found that If I elevate his credentials from user to power user then he was able to stayed logged in but nothing in the remote access desktop works the icons are there for the apps but,
nothing works not even the icons at the task bar. I had to create shortcuts directly from the apps and add them to the desktop and this would work.
This only worked for two new employees after the third new user not even with admin credentials where able to log in.

Part 2 of 2

On the third update this year something happen after a forced update from microsoft during working hours that the whole company was kicked out. only Admin could log in . Rebooted the server,
and still no one had access nor locally or remotely except admin. I found that all of the accounts the user group was removed from all the users account. and ADDING THE USERS GROUP back again to their accounts the users that had working accounts where able to log back in including local users. But now no users could be created.