Allow log on locally, - add new user greyed out. Fix via Domain Controller Policy Settings

Windows Several 2012. Allow log on locally – add new user greyed out. Fix via Domain Controller Policy Settings So here's the issue, in a Windows 2008 Server R2 VM, I created some new users in AD, but I still couldn't log in as them.  So I tried to add them to "Allow log on Locally" via local properties but the ability to add new users here was greyed out.  Sad Face. According to the Google machine I had to update this information in the Domain Controller Policy not the Local Security Policy.  Well Domain Controller Policy is not as easy to find as one might think 1) Go to Administrative Tools -> Group Policy Management 2) Navigate down through the tree… Forest: Current Domain -> Domains -> CurrentDomain.loc -> Domain Controllers -> Default Domain Controllers Policy 3) Right click Default Domain Controller Policy and select "Edit", this will bring up the Group Policy Management Editor, with "Default Domain Controller Policy" tree loaded 4) Navigate through the tree again… Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies 5) Click on "User Rights Assignment" in the tree and then double click on "Allow log on locally" in the right window 6) Now you can add your users! So add whoever is needed, click OK and then we have 1 more step. 7) We now need to push the group policy out everywhere.  So open the command prompt and run "gpupdate /force" Now you should be able to log on as your new users!! Inoreader is a light and fast RSS Reader. Follow us on Twitter and Facebook.