We have a problem with our user creation template. 

Helpdesk create users with multiple templates, and sometimes the parameter "Allow logon to terminal server" is not configured as well in the Active Directory user account.

Helpdesk can't change this parameter in the template, it's check by default.

So helpdesk must uncheck the parameter "Deny this user permissions to log on to remote desktop session host server"  in the Active Directory user account.

Do you know this issue ?

Regards.