Active Directory User issue

Hi,

I have created 2 VMs on Azure. One Vm as Domain forest and another one as member.

I created 'TestUser' on VM-1 under the domain group and now i can see that user is reflecting in VM-2 as well. However when i try to login with TestUser on VM-2 i get following error.

"The Connection was denied because user is not authorized for remote login"

I tried giving the following permissions. Still didn't work.

It worked  when i gave "Administrator" & "Domain Admin" which should not be the case

Please suggest.

Thanks,

Alam