How to reset user rights in the Default DC GPO

The Default Domain Controllers Group Policy object (GPO) contains many default user-rights settings. In some cases, changing the default settings may produce undesirable effects. This may result in a condition where unexpected restrictions exist on the user rights. If the changes are unexpected, or if the changes were not recorded so that it is unknown which changes were made, it may be necessary to reset these user-rights settings to their defaults.

It may be also necessary to reset the SeInteractiveLogonRight and SeDenyInteractiveLogonRight user-rights settings to their defaults if you receive the following error message when you try to log on to the console of the domain controller: “The local policy of this system does not permit you to logon interactively“

This entry was posted on September 13, 2008 at 12:09 pm and is filed under FAQ, Group Policy. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to “How to reset user rights in the Default DC GPO”

Erythromycin (PCE) Says:
October 3, 2008 at 1:10 am | Reply
mdyayayaya ….. * Many people think *…. the author thanks for the post!

Be your own BOSS @ WordPress