How to Assign "Log On Locally" User Rights in Windows 2000

This article describes how to assign "Log on locally" rights for users and groups in Windows 2000 Server.

By default, only the local administrators group is assigned the right to log on locally to a server. You can use the Microsoft Management Console Group Policy Editor snap-in in Windows 2000 Server to assign "Log on locally" user rights to other users and groups:

NOTE: If the server is a domain controller (DC), you must give the right on the DC object.

1. Click Start, click Run, and then type gpedit.msc to start the Group Policy Editor snap-in.
2. Double-click the Computer Configuration node, and then double-click the Windows Settings node.
3. Double-click the Security Settings node, and then double-click the Local Policies node.
4. Double-click User Rights Assignment, right-click Log on Locally, and then click Add.
5. Select the user(s) or group(s) that you want to add, and then click OK.
6. Quit the Group Policy Editor snap-in.