I have installed GP web client in Windows Azure. I created a test account in GP and in AD adding it to the users group I created before installing the web client. The web client works great as the administrator account I used to install it all with. When I try to log in with a plain user I get,

Unexpected Error

An unexpected error has occurred. Press the Sign-in button to reconnect to the application.
Correlation ID: 41dbc617-a889-432c-9922-a6a32a548dca

The user account can log into GP with no problems and when I add the user as a member of the domain admin group in AD it can then log into the Web Client with no problems. What rights is the user group missing so that they can get to the GP log in through the web client?

c042475d-7df7-4436-bbba-bd9762afb02f:An unexpected error has occurred.  Press the Sign-in button to reconnect to the application.:http://SVADC:48650/SessionService:System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Logon failure: the user has not been granted the requested logon type at this computer (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:

System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer

   at System.Diagnostics.Process.StartWithCreateProcess(ProcessStartInfo startInfo)

   at Microsoft.Dynamics.GP.Web.Services.Session.SessionProcess.StartableSessionProcess.TryToStartProcess()

   at Microsoft.Dynamics.GP.Web.Services.Session.SessionProcess.StartableSessionProcess.Start()

   at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionCreator.CreateSession(SessionCreationContext creationContext, Uri runtimeServiceBaseAddress, SessionUserInfo sessionUserInfo)

   at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionService.CreateSession(SessionCreationContext creationProperties, Guid authenticationToken)

   at SyncInvokeCreateSession(Object , Object[] , Object[] )

   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&...).

   at System.Web.UI.Page.HandleError(Exception e)

   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

   at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

   at System.Web.UI.Page.ProcessRequest()

   at System.Web.UI.Page.ProcessRequest(HttpContext context)

   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

I have granted the group read\write permissions on the folder structure where the web Client is installed on the Web server but that did not help.