Export (0) Print
Expand All
1 out of 4 rated this helpful - Rate this topic

Log on locally

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment


Determine which users can log on at the computer.

This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.

The default groups that have this right on each platform are:

  • Workstations and Servers

    • Administrators

    • Backup Operators

    • Power Users

    • Users

    • Guest

  • Domain Controllers

    • Account Operators

    • Administrators

    • Backup Operators

    • Print Operators

Note Image Note

To allow a user to log on locally to a domain controller, you have to grant this right by means of the Default Domain Controller GPO.

Related Policies

Page Image Deny logon locally

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft. All rights reserved.