A few years ago, I stumbled upon the same issue with Windows 7 and already blogged about it. But the error “The user has not been granted the requested logon type at this computer.” can still occur in Windows 10 when accessing network resources like shared folders. The reason for the error is one of the following:

  • The computer is inside a Windows 10 HomeGroup for easier network access.
  • Some of the security policy settings have been messed up due to a Windows 7 to Windows 10 upgrade or switching between HomeGroup and Active Directory domain joining.

The fix for Windows 10 is almost the same as on Windows 7: The security policy settings have to be adjusted. Type Win+R and start the Local Security Policy MMC by executing secpol.msc:

Local Security Policy MMC

Now navigate to Local Policies > User Rights Assignment. The following four security policy settings have to be adjusted:

Access this computer from the network

Make sure that Everyone (Jeder on the screenshot; I am on a German Windows 10) is selected:

Security Policy setting "Access this computer from the network" requires "Everyone"
Security policy setting “Access this computer from the network” requires “Everyone”

Deny log on locally

Check, that Deny log on locally does not contain Everyone. By default, on Windows 10 this shold be set to None. But on my computer this has not been the case. Depending upon how you access (guest access or user accounts) your network share, you might also remove the Guest (Gast) and HomeGroupUser$ entry.

Security Policy setting "Deny log on locally" must not contain Everyone and HomeGroupUser$
Security policy setting “Deny log on locally” must not contain Everyone and HomeGroupUser$

Allow log on locally

The setting Allow log on locally should either

  • contain all allowed user and/or security groups
  • in addition to that the group HomeGroupUser$ if you are using a HomeGroup
  • or Everyone for debugging purposes
Security policy setting "Allow log on locally"
Security policy setting “Allow log on locally”

Deny access to this computer from the network

Deny access to this computer from the network should not contain any users or groups:

Security policy setting "Deny access to this computer from the network"
Security policy setting “Deny access to this computer from the network”

Wrap up

In the end it is just important to know, that the error The user has not been granted the requested logon type at this computer is a result of a misonfiguration of the four security policy settings above. Just check, if one of the Guest, HomeGroupUser$ or dedicated network share user is somewhere in this settings and configure it properly.