<div>
If you would like to know which policy applied to client machine in domain environment, you should run <b>rsop.msc</b> in RUN<br />
<br />
Not gpedit.msc<br />
<br />
Gpedit.msc is for Local machine group policy.
</div>


If you would like to know which policy applied to client machine in domain environment, you should run rsop.msc in RUN

Not gpedit.msc

Gpedit.msc is for Local machine group policy.

<div>
If you have ran Gpupdate it should be updated in next restart.<br />
<br />
If it is not, you need to check in your server event viewer if there is anything related to GPO
</div>


If you have ran Gpupdate it should be updated in next restart.

If it is not, you need to check in your server event viewer if there is anything related to GPO

<div>
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
</div>


This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
I've recently set a new GPO to restrict the 'Allow logon locally' to Administrators, Power Users and Backup Operators.<br />
<br />
Resultant Set of Policy shows this policy applies without a problem:<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2014/11_w46/882603/2.JPG" target="_blank" title="2.JPG (32 KB)"><img alt="2.JPG" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2014/11_w46/800_882603/2.JPG" /></a><br />
Yet when I launch gpedit.msc on the machine, it shows the following:<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2014/11_w46/882607/1.JPG" target="_blank" title="1.JPG (10 KB)"><img alt="1.JPG" class="file-block lazyload" style="max-width: 492px;" data-src="https://filedb.experts-exchange.com/incoming/2014/11_w46/882607/1.JPG" /></a><br />
The policy seems to be applying, but not taking effect. The settings above are locked and I cannot manually modify them.<br />
<br />
Does anyone have any idea why this is happening? Restarting the computer, running gpupdate /force, setting the GPO as 'Enforced' does nothing. Surely this setting should be overridden by the policy I have set?<br />
<br />
Thanks in advance for any help.<br />
<br />
Adrian
</div>
</div>


1.JPG

2.JPG

Hi,

I've recently set a new GPO to restrict the 'Allow logon locally' to Administrators, Power Users and Backup Operators.

Resultant Set of Policy shows this policy applies without a problem:



Yet when I launch gpedit.msc on the machine, it shows the following:



The policy seems to be applying, but not taking effect. The settings above are locked and I cannot manually modify them.

Does anyone have any idea why this is happening? Restarting the computer, running gpupdate /force, setting the GPO as 'Enforced' does nothing. Surely this setting should be overridden by the policy I have set?

Thanks in advance for any help.

Adrian

&quot;Allow logon locally&quot; - User Rights Assignment - applied, but not taking effect

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.

Microsoft Server OS

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

&quot;Allow logon locally&quot; - User Rights Assignment - applied, but not taking effect

"Allow logon locally" - User Rights Assignment - applied, but not taking effect