Allow log on locally This logon right determines which users can interactively log on to this computer. Logons initiated ...

Allow log on locally  This logon right determines which users can interactively log on to this computer. Logons initiated by pressing CTRL+ALT+DEL sequence on the attached keyboard requires the user to have this logon right. Additionally this logon right may be required by some service or administrative applications that can log on users. If you define this policy for a user or group, you must also give the Administrators group this right.  Default on workstations and servers: Administrators Backup Operators Users.  Default on domain controllers: Account Operators Administrators Backup Operators Print Operators Server Operators.