Grant terminal services log on permission using GPO

To grant log on permission for a user or group, create and apply the following policy:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on through Terminal Services