title: Users getting removed from AD Group Automatically
body: <p>We have set of four servers. One server is domain control (DC) server and rest three servers are added under same domain. Apart from DC Server, rest all have SQL Server installed. I wanted to create a user group in DC server into which I can just add any user to provide remote desktop access to all servers. </p>
  
  <p>To achieve this I did following settings:</p>
  
  <ul>
  <li><p>I created "Domain_Name\ReadOnlyUsers" group in DC Server only.</p></li>
  <li><p>Setting#1: Went to secpol.msc> Local Policies > User Rights Assignment > in 
  right side I added "Domain_Name\ReadOnlyUsers" group for "Allow logon through 
  Remote Desktop Services" policy</p></li>
  <li><p>Setting#2: Opened system properties by going through My Computer>Properties> 
  Remote Settings. In Remote page of System Properties dialog box I added the 
  "Domain_Name\ReadOnlyUsers" group to allow remote desktop connection.</p></li>
  </ul>
  
  <p>I did above mentioned Setting#1 and 2 in all servers.</p>
  
  <p>After doing all these settings, I created a user "domain_name\md" into DC Server only and added that user to "Domain_Name\ReadOnlyUsers" group. I was successfully able to login using that user into all servers. But after sometimes, this user is automatically getting removed from "Domain_Name\ReadOnlyUsers" group and after that I am not able to login using "domain_name\md" user. So in order to login into servers, I need to add this user manually into "Domain_Name\ReadOnlyUsers" group . Any solution to get rid of this automatic removal of this user? </p>
  
  <p>OS Version: Windows Server 2012</p>