When users are logging into published desktops, they are getting the following message:
“To sign in remotely, you need the right to sign in through Remote Desktop Services. By default members of the Administrators group have this right. If the group you’re in does not have the right, or if the right has been removed from the Administrators group, you need to be granted the right manually.”
Remote Desktop Users group is missing from policy "Allow log on through Remote Desktop Services"