Replies6 suggested answers Show
· 4 replies Add heading textAdd bold text, <Ctrl+b>Add italic text, <Ctrl+i> Add a quote, <Ctrl+Shift+.> Add code, <Ctrl+e> Insert LinkAdd a link, <Ctrl+k>Add a bulleted list, <Ctrl+Shift+8>Add a numbered list, <Ctrl+Shift+7>Add a task list, <Ctrl+Shift+l> Directly mention a user or teamReference an issue or pull request Add heading textAdd bold text, <Ctrl+b>Add italic text, <Ctrl+i>Add a bulleted list, <Ctrl+Shift+8>Add a numbered list, <Ctrl+Shift+7>Add a task list, <Ctrl+Shift+l> reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emojiIn this post, we’re gonna solve “Logon failure: The user has not been granted the requested logon type at this computer” error. We will also go through the following:
I have created a new user in Active Directory on Windows Server 2012 R2, when I tried to log in with the newly created user to a site or windows, unfortunately, I couldn’t log in, I got the below error.
How to solve “The user has not been granted the requested logon type at this computer”?This error usually occurs in case the login user does not have permission to log on locally to this computer. The login user does not have permission to log on locally to this computerTo solve “The user has not been granted the requested logon type at this computer” error, you should make sure that the login user and all groups that belong to are allowed to log on locally to this computer.
Allow Logon Locally In Windows ServerSteps
Force Group Policy UpdateTo instantly reflect the above changes in Group Policy Management, you should do the following:
Allow Logon Locally to Windows (Alternative Method)Alternatively, you can also allow the newly created user to logon locally to the windows by doing the following: Steps
Force Group Policy UpdateTo instantly reflect the above changes in Group Policy Management, you should do the following:
Edit default domain policy grayed outEven if you have run the “Group Policy Management” as administrator, You may not be able to edit default domain policy as shown below: Actually, you get “Edit default domain policy grayed out” If the current user is not a member of Domain Admins security group or Enterprise Admins security group.
Enable “Edit default domain policy”To enable “Edit default domain policy” option, you must
Whatever which method you will use, you would be able to “Edit default domain policy” now as shown below: Add User button is grayed out in User Rights AssignmentAgain, you may get “Add User button is grayed out in User Rights Assignment” as shown below: This issue also occurs If the current user is not a member of Domain Admins security group or Enterprise Admins security group. Enable “Add User button in User Rights Assignment”To enable “Add User button in User Rights Assignment“, you should do the following:
Applies To
In conclusion, we have solved “Logon failure: The user has not been granted the requested logon type at this computer” error by configuring group policy management and allowing Logon Locally privileges to the new user to be able to login to the windows. We have also solved the below issues that we may face during configuring “Group Policy Management” :
If you have any related questions, please don’t hesitate to ask it at deBUG.to Community. What has not been granted the requested logon type?To solve “The user has not been granted the requested logon type at this computer” error, you should make sure that the login user and all groups that belong to are allowed to log on locally to this computer.
What is logon failure?A user sees the error “Logon failure: the user has not been granted the requested logon type at this computer” when attempting to log in through Duo Authentication for Windows Logon (RDP). Alternatively, a user may see the error "To sign in remotely, you need the right to sign in through Remote Desktop Services.
How do I give log locally permission?Navigate to Local Computer Policy >> Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment. If any accounts or groups other than the following are granted the "Allow log on locally" user right, this is a finding.
What is the event ID for failed logon?Event ID 4625 (viewed in Windows Event Viewer) documents every failed attempt at logging on to a local computer. This event is generated on the computer from where the logon attempt was made.
|