SSL VPN : error message : To log on to this computer, you must be gran

We are a church school and have server 2003 and XP environment in the past.
We use Sonicalwall SSL vpn to allow remote access.
Everything is cool when using XP.

I replaced a few workstations with new Windows 7 pro 64 bit machines. They are named identical and same IP addresses as the machines I replaced.

Using a remote machine to login through SSL VPN, I get this message on the machines I am using. I only get it trying to login to the Windows 7 machines. I can use the same remote machine and login to other XP machines fine.

I have no idea what to change and on which machine: server, local windows 7 machine I am trying to access, or the remote machine.

Any help would be greatly appreciated.

To log on to this remote computer, you must be granted the Allow log on Through Terminal Services right. By default, members of the remote desktop Users Group have this right. If you are not a member of the Remote Desktop Group or another group that has this right, or if the remote desktop users group does not have this right, you must be granted this right manually.

is this an AD domain or a workgroup ?

The network is a server 2003 domain with active directory.
The Windows 7 machine I cannot access is a member of that domain and listed on active directory.

The remote machines are XP stand alone machines trying to access network with SSL.

when you say "I replaced a few workstations with new Windows 7 pro 64 bit machines. They are named identical and same IP addresses as the machines I replaced."

did you remove them from ad then recreate them ?

also can you remote into these win7 machines from within your network, ie no vpn..

I do not believe I deleted them first. I have never had to do that in the past when I had drives fail, etc so I did not do this.

I cannot connect within the netowrk using remote desktop

I can ping them internally but not connect

I am trying to use an xp remote machine through the internet and SSL VPN to connect to Windows 7 machine on domain. Connecting to the Windows 7 machine is what provides the error. If connecting to another workstation that is XP it works fine.

when replacing a machine which is within an AD, you can of course keep the name and ip but you need to refresh the GUID (machine specific Identification within AD) the best method of doing this is by removing the old name within AD users and computers, find computer, right click, delete.

there maybe something (Group Policy setting) within the domain which is stopping you logging on...

the other test was within the same network, ie plugged into the same router/switch can you connect using RDP. so try from one of the other xp machines to RDP to it.

In most technical issues, like a sherlock holmes detective story, what you want to do is try to remove potential suspects by using a process of elimination.`

my bad, I reread your reply and you've done that.

where is the logon failing ?
are you getting prompted for the logon?

if you are getting a logon prompt then I would try to logon with the local user account ?

The machines work fine on the domain. However, I will delete the machines and rejoin them to the domain. I will do that during the week when I am up there.

I can login to SSL VPN and enter my credentials. I then select the machine I want to connect to and that is when it kicks out.

The SSL VPN points to the machine name so maybe resetting AD will help this also.

If I select an XP machine it connects fine. If I connect to the Windows 7 machine that is when I get the error.