In the virtual machine security event, you may see the following error:
Logon Type: 3
Account For Which Logon Failed:
Security ID: S-1-0-0
Account Name: AD\[email protected]
Account Domain: -
Failure Information:
Failure Reason: The user has not been granted the requested logon type at this machine.
Status: 0xC000015B
Sub Status: 0xC000015B
Possible Cause: The system administrator has restricted the Remote logon. This means the user is not permitted to connect to the remote machine using the current RDP connection method. To resolve this, contact your system administrator or technical support for assistance.
Possible Solution:
Using Group Policy (for domain-joined machines)
Open Group Policy Management Console (gpmc.msc)
Edit or create a GPO applied to the affected machines
Go to: Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignment and verify:
Allow log on through Remote Desktop Services: Add appropriate users/groups
Deny log on through Remote Desktop Services: Ensure the user is not listed here
Verify Group Membership
Ensure the user is a member of the Remote Desktop Users group on the target machine