Root Cause

This connection issue may be caused by either of the following:

• Neither the user account nor any of the groups it belongs to has been granted the "Allow log on locally" user right.
• The user account or one or more of the groups it is a member of has been listed in the "Deny log on locally" user right.

Allow log on locally

To assign the user right Allow log on locally:

1. On the Telnet server, open the Group Policy Management Editor. To do so, click Start, then in the Start Search box, type gpedit.msc, and then press ENTER.

   If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

2. In the navigation pane, open Computer Configuration, Windows Settings, Security Settings, Local Policies, and User Rights Assignment.
3. In the details pane, double-click Allow log on locally.
4. Click Add User or Group.
5. Find the user or group account you want to add, and then click OK.
6. Click OK to save your changes to the Group Policy object (GPO).

   Users that are currently logged on must log off and back on to be affected by the changed GPO setting.

Deny log on locally

To remove a user or group from the user right Deny log on locally:

1. On the Telnet server, open the Group Policy Management Editor. To do so, click Start, then in the Start Search box, type gpedit.msc, and then press ENTER.

   If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

2. In the navigation pane, open Computer Configuration, Windows Settings, Security Settings, Local Policies, and User Rights Assignment.
3. In the details pane, double-click Deny log on locally.
4. Select the user or group account you want to remove, and then click Remove.
5. Click OK to save your changes to the GPO.

   Users that are currently logged on must log off and back on to be affected by the changed GPO setting.