Security Policy Differences between XP and Win 7

I have a modified security Policy on some XP computers that limits logon to certain users and groups. The USER group us removed.  This does what I need to limit logon to certain XP computers on a domain.

I know that this can be done other ways via GPO and OUs, but I would appreciate it if any response sticks to the local machine.

When I go into SECPOL on a Windows 7 machine, where I used to see Log on Locally, I now see Deny logon locally.

I don't want to deny certain groups. I only want to allow certain groups.  Am I missing something?  How do I do the same on Windows 7 boxes as I had done on XP Boxes.

I can and have searched for this.  But I like asking the question here because I get more specific answers.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hello MrSlithy,

Both "Deny logon locally" and "Allow log on locally" existed in XP and are still present in Windows 7.

In SECPOL.MSC I can see both of these on a test machine I'm looking at here...sounds odd if they are not visible to you.  I wonder if there is something wrong with the local policy on your machine that is doing this - has there been any customisation of it?


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MrSlithyAuthor Commented:
Silly Rabbit!!!  its under "A" for allow.  I never had need for the Deny in XP. So the two opposites were "Deny  . . ."  and "Logon Locally"

I saw the DENY in Win 7, but I scrolled down to L and never found Logon Locally.

How was that for easy points?  Don't I feel silly.
Glad that was it.  It's better to ask and move on than stare blankly at the screen!

Lets be honest, we've all been there at some point :-)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.