[Samba] Is there have simplest way to make domain users which in remote desktop group can remote/local logon the workstation ?

[Dongsheng Song]

On Sat, Dec 20, 2014 at 4:15 PM, Tim <rintimtim at gmx.net> wrote:
> Then I would do it with a group policy. Have a look right here:
> http://technet.microsoft.com/en-us/library/ee791928(v=WS.10).aspx
>
> Remind that you leave the default policies untouched. Create a new GPo and
> link it to your desired OU.
>

After put domain users in the remote destop group in the DC, these
users still can't logon workstation via remote desktop, it's a very
strange design. Maybe we can make samba-tool fix it by certain
parameter ?