When a user logs on to a terminal server the error “access denied” pops up.
In the eventlog the following errors (event id 6 and 15)
To fix this problem add the MaxTokenSize key to the register with a value of 65535:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Entry: MaxTokenSize
Data type: REG_DWORD
Value: 65535
To change this for multiple Terminal Servers you can add it with a gpo: http://support.microsoft.com/kb/938118