Users cannot access the FIM Portal unless they are a member of the local Group "Users" on the FIM Service server

Hi,

I have an FIM 2010 R2 SP1 install on Windows 2012 infrastructure using SharePoint 2013.  Roles are broken out so I have a separate server for FIM Service, FIM Sync and SQL backend.

I have populated users as required but they cannot access the FIM Portal unless they are members of the local security group "Users" on the FIM Service server itself.  When not added to this group they get prompted for credentials repeatedly and after entering them repeatedly then I receive a message from the below link

"https://idmportal.company.com/_layouts/MSILM2/ErrorPage.aspx

Unable to process your request"

Once I add the user into the "Users" group on the FIM Service server then the user logs in with no issues.

Has anyone else come across this issue?

Thanks,

B