Can't edit Local Security Policy

2

I'm trying to add users to the Access this computer from the network User Rights Assignment policy but the 'Add' button is disabled:

enter image description here

I'm connecting to the machine via RDP using the local Administrator account (not a domain user). I've also tried to do the same with a domain user that is in the Administrators group but the result is the same.

How can I add a user to this policy?

The machine is running Windows 7.

etaiso

Posted 2015-08-27T12:36:17.137

Reputation: 121

You need to be using a domain user in the Administrator user group – Ramhound – 2015-08-27T12:38:16.320

I am using it (the built-in account..), but I login via RDP. does it matter? – etaiso – 2015-08-27T12:38:47.447

Your not using one, you indicated your using the local Administrator account, you need to be using a user connected to the domain with Administrator permissions. – Ramhound – 2015-08-27T12:44:32.307

I also tried that . it's the same – etaiso – 2015-08-27T12:46:17.523

Update your question; If I had know that; I could have saved time responding. – Ramhound – 2015-08-27T12:51:06.517

Answers

2

You cannot edit this User Rights Assignment policy because this setting is being managed by a domain-based Group Policy. In this case, the domain Group Policy setting has precedence and you are prevented from modifying the policy via Local Group Policy.

To modify this policy, either:

  1. Modify the policy in the applicable domain Group Policy Object.
  2. Prevent any domain-based GPOs from specifying this setting, then edit the computer's Local Group Policy.

I say Reinstate Monica

Posted 2015-08-27T12:36:17.137

Reputation: 21 477

where can I find this policy in the GPO? – marijnr – 2018-06-13T13:15:05.810

1Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment – I say Reinstate Monica – 2018-06-13T13:16:58.957