When you attempt to log on to a remote access server, you receive a message similar to:
Unknown user or Bad Password.
When you attempt to log on to the console of the remote access server, you receive a message like:
Your account is configured to prevent you from using this computer.
This behavior is generally the result of a security policy that shuts down the computer if audit events cannot be logged.
To workaround this behavior:
1. Disable the Shut down your system immediately if unable to log security audits policy, which may be defined in the default domain policy, default domain controller policy, and/or local security policy. The path to this policy is:
Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options.
2. Set the CrashOnAuditFail Value Name to a data value of 0.
3. Start / Run / secedit /refreshpolicy machine_policy /enforce / OK.