Cannot Logon Locally

[Bob]

I have a User whom I do not want to make an administrator
but whom I do want to allow local logon access. The
machine is the sole computer in the domain and thus a
domain controller.

I've already updated the Global Policy Security
Settings/Local Policies/User Rights Assignments/Log on
locally to enabled for this user and applied the policy to
the specific user even though Authenticated Users is
applied by default. I've also enabled the Local Policy of
the machine for this User, though the Global should take
precedence, right?

The machine still responds that "The local policy of this
system does not permit you to logon interactively."

Any help is greatly appreciated!

Bob

 

[Steven L Umbach]

Make the change in Domain Controller Security Policy and it should work. It sounds
like you modified Domain Security Policy as by default authenticated users are not
included in Domain Controller Security Policy user right to logon locally. --- Steve

 

[Guest]

Thank you! This worked. I didn't realize the distinction
between the Default Domain Policy and the Default Domain
Controllers Policy.