Question : Problem: How to set user access permissions (global policy local setting locked)

We added a new application to our citrix server for a new group of users.  Upon login, we get the "To log on to this remote computer, you must have terminal server user access permissions.

Under Domain Security policies, we added the new group to the user access rights for the "Allow login to remote computer" option.  This did not help.  We went into mmc and gpedit.msc and we see that the new group is not in the same respective place.  However, we cannot add the group as all of these settings have a padlock attached to the lable and the add/remove buttons are greyed out.  

We cannot determine what is preventing us from make this change.

The new program works fine if used with an existing user, not the new user/group we created.

How to we get past the padlock and where is the proper place to make this change.

Cliff.

Answer : Problem: How to set user access permissions (global policy local setting locked)

on the local citrix server add the new group you created to the "Remote Desktop Users" group.