"Logon type has not been granted" error when running a desktop flow or creating a connection
This article provides a resolution for the -1073741477 error code that occurs when you run a desktop flow or create a desktop flow connection in Microsoft Power Automate.
Applies to: Power Automate
Original KB number: 5021230
Symptoms
When you run a desktop flow or create a desktop flow connection, you receive the following error message:
{
"error":{
"code": "-1073741477",
"message": "A user has requested a type of logon (for example, interactive or network) that has not been granted. An administrator has control over who can logon interactively and through the network."
}
}
Cause
On the impacted machine, a local security policy might not allow (or might deny) the logon of the account (or a group that contains this account) used in your connection.
Note
"Deny" permissions take precedence over "Allow" permissions unless specific exceptions are configured at the domain controller level.
Resolution
To resolve the issue, ensure that the user account or group used in the connection has logon permissions, and isn't on the denied accounts list.
Sign in to the impacted machine preferably as an administrator.
Go to Local Security Policy.
Navigate to Security Settings > Local Policies > User Rights Assignment.
Right-click the Allow log on locally policy and select Properties.
Check if the group (the account belongs to) or the account itself is on the list. If not, add it to the list using Add User or Group.
Perform steps 4 to 5 for the following policies as well:
- Access this computer from the network
- Allow log on through Remote Desktop Services
For the following policies, check the Properties to verify that the group (the account belongs to) or the account itself isn't on the denied accounts list.
- Deny access to this computer from the network
- Deny log on locally
- Deny log on through Remote Desktop Services