Allow log on locally

Information

Allow log on locally

This logon right determines which users can interactively log on to this computer. Logons initiated by pressing CTRL+ALT+DEL sequence on the attached keyboard requires the user to have this logon right. Additionally this logon right may be required by some service or administrative applications that can log on users. If you define this policy for a user or group, you must also give the Administrators group this right.

Default on workstations and servers: Administrators
Backup Operators
Users.

Default on domain controllers: Account Operators
Administrators
Backup Operators
Print Operators
Server Operators.

Solution

Policy Path: User Rights Assignments
Policy Setting Name: Allow log on locally

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-22h2-security-baseline/ba-p/3632520

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b)

Plugin: Windows

Control ID: 36851a4d42aba999289556c65c98f665c3cdcefe8baff5c8fa73bfd89dabba66