Symptom
Desktop flow execution or connection creation is failing with the error status code -1073741477 and message: A user has requested a type of logon (e.g., interactive or network) that has not been granted. An administrator has control over who may logon interactively and through the network.
Cause
On the impacted machine(s), the account used in your connection (or a group including this account) may not be allowed to logon by a local security policy or may be denied.
Note
Deny permissions take precedence over the Allowed permissions unless specific exceptions are configured at domain controller level.
Resolution
Logon to the impacted machine (preferably as an admin)
-
Go to Local Security Policy
-
Navigate to Security Settings -> Local Policies -> User Rights Assignment
For the following policies please verify that either the group (that the used account is a part of) or the user account itself is added to the list
-
Access this computer from Network
-
Allow log on locally
-
Allow log on through Remote Desktop Services
For the following policies please verify that either the group (that the used account is a part of) or the used account itself is NOT in the list of denied accounts
-
Deny access this computer from Network
-
Deny log on locally
-
Deny log on through Remote Desktop Services
