8/3/2019 Grant a Member the Right to Logon Locally

1/1

1/8/11 Grant a Member the Right to Logon Locall

1/1echnet.microsoft.com/en-us/librar/ee957044(WS.10).asp

ering Active Directory Domain Services

duction to Administering Active Directory Domain

inistering Domain and Forest Trusts

inistering the Windows Time Service

inistering DFS-Replicated SYSVOL

inistering the Global Catalog

inistering Operations Master Roles

inistering Active Directory Backup and Recovery

inistering Intersite Replication

inistering the Active Directory Database

inistering Domain Controllers

ntroduction to Administering Domain C ontrollers

anaging Domain Controllers

Installing Remote Server Administration Tools

Managing Antivirus Software on Active Directo

Preparing for Active Directory Installation

Installing a Domain Controller in an Existing D

Verifying Active Directory Installation

Adding Domain Controllers in Remote Sites

Grant a Member the Right to Logon Locally

Renaming a Domain Controller

Decommissioning a Domain Controller

Forcing the Removal of a Domain Controller

inistering Active Directory Domain Rename

al Resources

tory Quotas

tory and Active Directory Domain Services Port R

tory Domain Services: Last Interactive Logon

lication Migration Guide: FRS to DFS Replication

mote Server Administration Tools

ctive Directory Schema Extension Conflicts

main Services for Windows Server 2008 R2

tion Services

ight Directory Services

Management Services

Grant a Member the Right to Logon L...

Grant a Member the Right to

Logon Locall

Applies To: Windows Server 2008 R2

Domain controllers, by default, restrict the types of useraccounts that have the ability to log on locally. By default,only members of the Account Operators, Administrators,Backup Operators, Print Operators, and Server Operatorsgroups have the Allowed logon locall system right. Ifyou want to grant a user account the ability to log onlocally to a domain controller, you must either make thatuser a member of a group that already has the Allowedlogon locall system right or grant the right to that useraccount.

Note

The phrases log on interactively and log on to theconsole are alternate expressions that refer to theability to log on locally and to the Allow Log onlocall right.

Regarding the following procedure, it is assumed that youalready know how to create Active Directory user accountsand group accounts, as well as knowing how to addmembers to groups. For procedures to perform any ofthese tasks, see:

Create a New User Account

(http://go.microsoft.com/fwlink/?LinkID=138269)

Create a New Group

(http://go.microsoft.com/fwlink/?LinkID=133523)

TechNet TechNet Library Windows Server

Windows Server 2008 and Windows Ser...

Browse Windows Server Technologies

Active Directory Domain Services fo... Operations

Active Directory Domain Services Op...

Administering Active Directory Doma...

Administering Domain Controllers

Managing Domain Controllers

Active Directory Services

Active Directory Domain Services

Search TechNet ith Bing

Windows Server TechCenter

Microsoft.com Welcme Sign in

Home 2008 2003 2000 Librar Forums Classic | Lightweight | ScriptFree

Click to Rate and Give FeedbackPrinter Friendly Version Send Community Content

Unied Sae - Englih