User has not been granted the requested logon type for this computer

Posted on 8/3/2012 @ 7:45 PM in #SharePoint by | Feedback | 2975 views

You may have noted in SharePoint 2013 that the sign in as a different user link is missing. I can imagine why Microsoft took it out, with claims, office apps, and expiring cookies, it was more of a pain than help. But, us devadmins are different – we need “Sign in As”.

There are two ways around this problem,

a) CTRL_SHIFT_RIGHT_CLICK on your browser, and choose run as different user. Here, run the browser as a different user – note this only works with windows based credentials. One common error you may encounter here is “User has not been granted the requested logon type for this computer”. Here is how to fix that -

  • Run gpedit.msc
  • Expand to domain controllers, choose default domain controllers policy, go to settings and choose “Edit”.
  • Then in the “Group policy management editor”, go to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\ and find “Access this computer from the network”.
  • Here, add the accounts that need to do runas.

Now you should be able to run the browser as a different AD user.

 

b) Enable sign-in-as, here is how,

  • Find the 15\template\controltemplates\welcome.ascx, and add the following element in it,
<SharePoint:MenuItemTemplate runat="server" ID="ID_LoginAsDifferentUser"
 Text="<%$Resources:wss,personalactions_loginasdifferentuser%>"
 Description="<%$Resources:wss,personalactions_loginasdifferentuserdescription%>"
 MenuGroupId="100"
 Sequence="100"
 UseShortId="true"
 />
  • That’s it! You should get “Sign in as different user” again – remember, this does not affect office apps, or issues around cookie expiration etc. Use with care!

Sound off but keep it civil:

Older comments..


On 8/31/2012 6:00:48 AM Servé Hermans said ..
There is a (rather annoying) option c. Through IE options manage the settings of your security zone and set the login options to always prompt.