Wednesday, March 2, 2011

How to assign "Allow log on locally" rights to a Domain Controller


The Microsoft Knowledge Base has an answer (KB 234237):

  1. Run mmc
  2. Add Group Policy Management snap-in
  3. Browse to your domain, right-click and click Edit
  4. Open the path Default Domain Controllers Policy\Computer Configuration\Windows Setting\Security Settings\Local Policies\User Rights Assignment
  5. Edit Log On Locally settings

No comments: