{"id":8901,"date":"2020-02-28T18:25:58","date_gmt":"2020-02-28T22:25:58","guid":{"rendered":"http:\/\/nycphantom.com\/journal\/?p=8901"},"modified":"2020-02-28T18:26:01","modified_gmt":"2020-02-28T22:26:01","slug":"logon-failure-the-user-has-not-been-granted-the-requested-logon-type-at-this-computer","status":"publish","type":"post","link":"http:\/\/nycphantom.com\/journal\/?p=8901","title":{"rendered":"Logon failure: the user has not been granted the requested logon type at this computer"},"content":{"rendered":"\n

On Windows Server 2008, can't runas certain user. Gave the above error.<\/p>\n\n\n\n

Solution<\/a>:<\/p>\n\n\n\n

Domain Controllers<\/strong><\/p>\n\n\n\n

  1. Open the Group Policy Management Console (gpmc.msc)<\/strong> on the domain controller.<\/li>
  2. Expand your domain and then the Domain Controllers <\/strong>OU.<\/li>
  3. Right-click the Default Domain Controllers Policy<\/strong> and select Edit.<\/strong><\/li>
  4. Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignment.<\/strong><\/li>
  5. Configure Allow log on locally<\/strong> and Allow log on through Remote Desktop Services<\/strong> rights to include the users\/groups that will be logging into any domain controllers protected with Duo Authentication for Windows Logon.<\/li>
  6. Ensure that Deny logon locally<\/strong> is not applied to the same users\/groups.<\/li>
  7. Run a gpupdate \/force <\/strong>command on the appropriate domain controllers to apply the policy changes.<\/li><\/ol>\n","protected":false},"excerpt":{"rendered":"

    On Windows Server 2008, can't runas certain user. Gave the above error. Solution: Domain Controllers Open the Group Policy Management Console (gpmc.msc) on the domain controller. Expand your domain and then the Domain Controllers OU. Right-click the Default Domain Controllers Policy and select Edit. Navigate to Computer Configuration … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-8901","post","type-post","status-publish","format-standard","hentry","category-technical"],"_links":{"self":[{"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/posts\/8901","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8901"}],"version-history":[{"count":1,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/posts\/8901\/revisions"}],"predecessor-version":[{"id":8902,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=\/wp\/v2\/posts\/8901\/revisions\/8902"}],"wp:attachment":[{"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8901"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/nycphantom.com\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}