User login requires the rights to log on locally and access this computer from the network. On domain controllers, these rights are disabled by default. If SSH Tectia Server has been installed on a domain controller, the log on locally and the access this computer from the network permissions must be enabled on the domain controller for the Domain Users group.

SSH Tectia Server allows defining locally the user logon types that are allowed on the host. By default, the Windows-set logon types are used, but for password-based authentication methods you can define windows-logon-type. For XML configuration instructions, see settings. For SSH Tectia Server Configuration GUI instructions, see General.

For example, in case you need to enable accounts that do NOT have the right to log on locally, use setting windows-logon-type="network".