I have a local Windows account and I want to make it impossible to login to the machine as this user – both locally and using remote desktop. Now I have set these two "deny" privileges for the account:
- Deny log on locally
- Deny log on through Remote Desktop Services
I still want to use the user for running commands using runas
. But when I now run a runas
command I get:
C:\Users\user1>runas /USER:user2 cmd
Enter the password for user2:
Attempting to start cmd as user "MACHINE\user2" ...
RUNAS ERROR: Unable to run - cmd
1385: Logon failure: the user has not been granted the requested logon type at this computer.
Is there a privileges I can assign to user2
to fix this problem?