Drill Down to Allow Log On Locally

Figure 3: Drill down to Allow Log On Locally Policy

In order to navigate to the Policy that we want to examine, the path to click on will be as listed below:

• Computer Configurations
• Windows Settings
• Security Settings
• Local Policies
• User Rights Assignment
• Allow log on locally

Notice the five groups that by default are allowd to log in locally on XP Professional. As you can see in Figure 3 are the groups of Administrator, Backup Operators, Guest, Power Users, and User. In order to keep Active Directory users that are not administrators from accessing this machine, we need to examine other types of Active Directory objects (user ids or groups) that might be in one of the above listed groups that have the ability to log on locally.