In group policy go to Computer Configuration\Policies\Security Settings\Local Policies\User Rights Assignment Define the Deny log... read more