Details

Allow log on locally

This logon right determines which users can interactively log on to this computer. Logons initiated by pressing CTRL+ALT+DEL sequence on the attached keyboard requires the user to have this logon right. Additionally this logon right may be required by some service or administrative applications that can log on users. If you define this policy for a user or group, you must also give the Administrators group this right.

Default on workstations and servers: Administrators

Backup Operators

Users.

Default on domain controllers: Account Operators

Administrators

Backup Operators

Print Operators

Server Operators.

Solution

Policy Path: Local PoliciesUser Rights Assignment
Policy Name: Allow log on locally

Supportive Information

The following resource is also helpful.

• https://www.microsoft.com/en-us/download/details.aspx?id=55319

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6(7)(b)
• CSCv6|16

Source

• Tenable.com/audits