Gfrktyl

I am using Windows Server 2012 and I want to grant a user access to login on the Remote Desktop. But when I do that I get the error:

Logon Failure: the user has not been granted the requested logon type at this computer

But I think that this is not possible.

The user is created in the OU called RemoteUsers and they have a Group Policy that allows to login via Terminal Services and to Logon Locally (for Everyone.)

The user also has the role "Remote Desktop Users"

Did I do something wrong and how can I give the user access to logon on the Remote Desktop?

Note: I've already run gpupdate /force without any success.

The User Right Assignments you're specifying need to affect the computer objects in Active Directory, not your user object. In other words, the GPO linked to your "RemoteUsers" OU needs to be linked to the OU where the computer(s) your users are logging in.

Then, since your users are members of the Everyone group, they'll be able to connect remotely, as long as Remote Desktop is enabled on the target computers (e.g. by enabling it directly on the machine or enabling the Computer/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Allow users to connect remotely using Remote Desktop Services group policy setting).

A Better Way to Grant Remote Desktop Rights

Modifying the default User Right Assignment security settings is a less preferred method of granting users the right to use Remote Desktop, particularly because URA group policies are not cumulative. Instead, the URA specified in the last GPO which is applied "wins," overwriting previously applied GPOs. This makes management of these policies difficult on anything but a small scale.

A better approach is to use a Group Policy Preference to add the target user or group to the computer's Remote Desktop Users group (which is granted the required URA by default). For more information, refer to this Microsoft TechNet blog post.