10.Changing Allow Logon Locally Policy

 Changing Allow Logon Locally Policy

A computer running windows 2012 server Domain Controller.

SYS1

Domain Controller 

IP Address             10.0.0.1  

Subnet Mask          255.0.0.0 

Preferred DNS      10.0.0.1 

Steps:

1. Log in as  Administrator to the Domain Controller, click Press Windows Key to go to Start, select Group Policy Management.

2. Expand Forest->  Expand Domain -> Expand Microsoft.com ->Expand Domain Controllers -> right click Default Domain Policy and select Edit.

3. Expand Computer configuration -> Expand Policies -> Expand Windows Settings -> Expand Security Settings -> Expand Local Policies -> Expand User Rights Assignment -> Expand Allow logon locally.

4. Click Add User or Group -> Click Brower -> Enter the Username -> Click OK.

5. Click OK -> OK -> Apply and OK.

6. Go to Start, type run Type Control Panel ibn Search Apps, and select Run, type GPUPDATE and it refreshes the policy changes.

Verification:

1. Log on to Domain Controller as Domain User (User1).