What would happen if you remove a GPO containing the "allow log on locally" setting

Rob Torquemada 0 Reputation points
2023-12-02T18:07:26.53+00:00

Suppose you have a GPO that sets the "allow log on locally" setting.

What would happen if you removed this GPO from a device?

Would the PC end up with nothing in the "allow log on locally" setting, or would it just revert back to default values?

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,142 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,904 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Anonymous
    2023-12-02T18:32:17.32+00:00

    Yes, nothing. The defaults are below if this is what you want then add them back in there.

    --please don't forget to close up the thread here by marking answer if the reply is helpful--

    enter image description here


  2. Daisy Zhou 20,956 Reputation points Microsoft Vendor
    2023-12-05T06:50:42.66+00:00

    Hello Rob Torquemada,

    Thank you for posting in Q&A forum.

    If the setting hasn't been previously defined for the device on this client.

    If a previous value doesn't exist in the database, then the setting doesn't revert to anything and remains defined as is. This behavior is sometimes referred to as "tattooing".

    Would the PC end up with nothing in the "allow log on locally" setting, or would it just revert back to default values?
    A: It remains the value "allow log on locally" setting within GPO in the domain controller.

    For more information, please refer to the part of "Persistence of security settings policy" in the link below.
    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings#persistence-of-security-settings-policy

    Hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.


  3. Anonymous
    2023-12-05T18:52:27.0366667+00:00

    Something here could help.

    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/allow-log-on-locally

    I'd always double check it to confirm.

    --please don't forget to close up the thread here by marking answer if the reply is helpful--