How to Assign "Log On Locally" User Rights in Windows 2000 (220609)

MORE INFORMATION

By default, only the local administrators group is assigned the right to log on locally to a server. You can use the Microsoft Management Console Group Policy Editor snap-in in Windows 2000 Server to assign "Log on locally" user rights to other users and groups:

NOTE: If the server is a domain controller (DC), you must give the right on the DC object.

1. Click Start, click Run, and then type gpedit.msc to start the Group Policy Editor snap-in.
2. Double-click the Computer Configuration node, and then double-click the Windows Settings node.
3. Double-click the Security Settings node, and then double-click the Local Policies node.
4. Double-click User Rights Assignment, right-click Log on Locally, and then click Add.
5. Select the user(s) or group(s) that you want to add, and then click OK.
6. Quit the Group Policy Editor snap-in.