I have an instance of Windows Server 2016 which is setup as a Domain Controller. An application running on this server requires a domain user account that is permitted to login locally. I have updated group policy and added the domain user group to the "Allow logon locally" setting and run "gpupdate /force". However, I am not still not able to login locally with a domain user account or successfully launch the application.

How can Windows Server 2016 (running as a Domain Controller) be configured so as to allow for domain users to login locally?

  • How is the account logging on? As a service? Scheduled task? Some other way? – Greg Askew Jul 3 '18 at 13:24
  • The account is logging on via an application launched via a remote application server program. When I try logging onto the server from the Windows login screen using a domain user account, the attempt fails with the error “The sign-in method you’re trying to use isn’t allowed. For more info, contact your network administrator.” – Guru Josh Jul 3 '18 at 13:34
  • When I try logging onto the server from the Windows login screen. Logging on at the console, or remote desktop? – Greg Askew Jul 3 '18 at 14:39
  • Logging in at the console – Guru Josh Jul 4 '18 at 3:35
  • You probably need to include the output of the following command on the domain controller to confirm the rights assignment: secedit.exe /export /areas USER_RIGHTS /cfg filename.txt – Greg Askew Jul 4 '18 at 14:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.