This is accually an annoying issue, but the solution is VERY SIMPLE!...
Open up EBS Admin Console on Management Server... Select Licencing and make sure that user has a licence. Without a license it goes into the user properties in AD Users Computers and Restricts the logon as to only the servers.
As other users pointed out... its the CALS, just thought i'd elaborate on the fix.