Introducing Active Directory - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 103

15. If you get a message stating that the user isn't allowed to log on because of a policy that pre-
vents regular users from logging on locally to a server, click OK , and then click Switch User .
16. Log back on to your server as Administrator.
17. Open the Group Policy Management MMC. Click to expand the Domain Controllers OU.
Right-click Default Domain Controllers Policy and click Edit to open the Group Policy
Management Editor.
18. Under Computer Configuration, click to expand Policies , Windows Settings , and then
Security Settings .
19. Click to expand Local Policies , and then click User Rights Assignment . You should see a list
of User Rights Assignment policies in the right pane (see Figure 3-21).

3

Figure 3-21 User Rights Assignment policies

20. In the right pane, double-click the Allow log on locally policy. Click Add User or Group . In
the Add User or Group dialog box, type Domain Users , and then click OK twice.
21. Close all windows, and log off. Log on as testuser1 by following Step 12, but use
Password02 as the password. If you still can't log on, you might need to wait a few minutes
and try again. Group policies take some time to take effect.
22. After you're logged on, click Start . Note that Control Panel isn't an option on the Start
menu. Close the Start menu.
23. Right-click the desktop and click Personalize . You see an error message stating that the oper-
ation has been canceled because of restrictions. Click OK . Your policy has clearly taken
effect.
24. Log off the server.