Computer Configuration
Windows Setting
Security Settings
Local Policies
User Rights Assignment
Description
Determines which users are prevented from logging on at the computer. This policy setting supercedes the
Log on locally policy setting if an account is subject to both policies.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
By default, there are no accounts denied the ability to logon locally.
Log on locally
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Description
Determine which users can log on at the computer.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
The default groups that have this right on each platform are:
- Workstations and Servers
- Administrators
- Backup Operators
- Power Users
- Users
- Guest
- Domain Controllers
- Account Operators
- Administrators
- Backup Operators
- Print Operators
Note
To allow a user to log on locally to a domain controller, you have to grant this right by means of the Default Domain Controller GPO.
LinkBack URL
About LinkBacks
