Unable to run DS ControlPoint as or login over a network using the DSNVSUser account.

Issue

Require an update to the DS PelcoAPI connection settings.

Running DS ControlPoint 'as a different user' using the DSNVSUser account credentials fails with "Logon Failure: the user has not been granted the requested logon type at this computer."



 

Product Line

Pelco Video Management

Environment

  • Digital Sentry 7.8.91 and above.
  • DSSRV / DSSRV2
  • DS NVs
  • DigitalSENTRY DSNSMRest Service

Cause

Installing the DigitalSENTRY DSNSMRest Service adds the DSNVSUser to the "Deny local login" Windows policy.

Resolution

The DSNSMRest Service installation currently has a side effect of adding the DSNVSUser account to the "Deny local login" Windows policy, this causes an issue when trying to update the DS PelcoAPI connection settings.

Remove the DSNVSUser from the 'Deny local login' local policy.

  1. Click on START > and type in gpedit.msc > ENTER.




     
  2. In the Local Group Policy Editor navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment
    Locate the following entries:
    • Deny access to this computer from the network
    • Deny log on as a batch job
    • Deny log on locally.




       
  3. Double-click on the one of the Deny entries and remove the DSNVSUser account.  Click OK to save. 





     
  4. Repeat for all 3 entries and verify the DSNVSUser account is no longer listed for those policies.



     
     
  5. Close the Local Group Policy Editor.  You should now be able to log into DS ControlPoint using the DSNVSUser account.