Allow log on locally

This logon right determines which users can interactively log on to this computer. Logons initiated by pressing CTRL+ALT+DEL sequence on the attached keyboard requires the user to have this logon right. Additionally this logon right may be required by some service or administrative applications that can log on users. If you define this policy for a user or group, you must also give the Administrators group this right.

Policy path: 

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Comments: 

Logoff required

Default: 

Default on workstations and servers: Administrators Backup Operators Users. Default on domain controllers: Account Operators Administrators Backup Operators Print Operators Server Operators.

Supported on: 

At least Windows XP SP2, Windows Server 2003

Registry settings: 

User Rights security settings are not registry keys

Reboot required: 

No