NULL SID Security Log Event ID 4625 when attempting logon to 2008 R2 Remote Desktop Session Host

Question

This is a new deployment of Server 2008 R2 in a newly created 08 R2 active directory on a newlyt installed 08 R2 RDSH server.
A new generic user is created in AD. That user can log on to the terminal server on the console just fine. But that user cannot logon via RDP. Furthermore, the domain admin credentials also cannot logon via RDP.
When either set of credentials is used, the logon attempt registered in the Windows Security Even Log as a denied attempt with Event ID 4625 reporting a NULL SID.
Troubleshooting: The RDSH has already been disjoined and rejoined to the domain. Also, curious note, there are three ways to save the user account on the RDSH server as a valid user account which has permissions to logon. The one Microsoft recommends is to open computer management and edit the remote desktop users group. When I the accounts here and click apply, they immediately dissapear. Secondly, I can open the computer properties and go to the remote tab. There I find the user accounts added using the previous method are enumerated but not displaying correctly. They show up with the RDSH server name and a question mark. The last way, is to open the Remote Desktop Session Configuration tool and edit the properties of the rdp connection and go to the security tab. This was the only place I could get a user to ‘stick’ but the logon attempts still show a NULL SID and access is denied.
I have scoured every bit of RDS documenation I can find with no luck.
Thanks,
Chris

Answer 1

I am also experiencing this issue. 
2008 servers, 2007 exchange on server 2008. 
These are fresh servers, fresh AD. Users can log onto domain normally, RDP not working for admin accounts, generating same errors as posted above.
The bigger issue, is that we have a cisco messaging service account that is generating this error on the DC's and the Exchange server as well. The service basically emails users voicemails to their inbox. The user we've created for the cisco service is unable
to authenticate to the exchange server, in turn generating the same errors posted above as well. We can log on to the domain with this account just fine. 
Any ideas on this? We have not tried re-adding the servers to the domain. 
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          5/5/2010 9:01:13 AM
Event ID:      4625
Task Category: Logon
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      xx.corp
Description:
An account failed to log on.
Subject:
Security ID:                         NULL SID
                Account Name:                 -
                Account Domain:                             -
                Logon ID:                             0x0
Logon Type:                                       3
Account For Which Logon Failed:
                Security ID:                         NULL SID
                Account Name:                
xxxx
                Account Domain:                            
xxxx
Failure Information:
                Failure Reason:                 Domain sid inconsistent.
                Status:                                  0xc000006d
                Sub Status:                         0xc000019b
Process Information:
                Caller Process ID:             0x0
                Caller Process Name:     -
Network Information:
                Workstation Name:        laptop
                Source Network Address:            -
                Source Port:                       -
Detailed Authentication Information:
                Logon Process:                  NtLmSsp 
                Authentication Package:               NTLM
                Transited Services:          -
                Package Name (NTLM only):       -
                Key Length:                        0