Can I know the debugging procedure which will capture logon denied
message. For an example,  if the user is added to deny logon locally
via group membership then will I be able to see this in any of the log
file which I need to enable. One of the user is unable to rdp the
server even after I removed from grouo which is listed in the deny
logon locally.

Please help me to debug this issue.

Thank you,