Logon locally for DC

[rook]

I've been trying to work on a GPO(logon_locally) that I
applied in an Domain controllers OU. This will give rights
to a user to login to DC and dol basic things in the local
machine like share, clear event logs, install software etc.

However the GPO that I did doesnt seem to work. I tried to
enforce and it applied succesfully but still no luck.

I runned the GPresult and I got this

- local policy
- default domain controllers policy
- logon_locally
- DEfault domain policy

Dont think there is a conflict but still no
luckkkkkkkkkk.. Please any advise looks like the GPO that
I added doesnt seems to work?

 

[Steven L Umbach]

If you created a new GPO for the domain controllers container, it will need to be on
top of the list in order for it to override the user rights assignments in the
default domain controller policy. --- Steve