How To: Deny server logons while still allowing ArcSDE users to log in


Some administrators require that users be denied from logging into the server console while still being able to log in to ArcSDE.


Users in the 'Deny Logon Locally' security policy are unable to logon to the server, but are still be able to spawn ArcSDE processes.

  1. Open Control Panel.

    Start > Settings > Control Panel

  2. Navigate to Administrative Tools and click Local Security Settings.
  3. Expand Local Policies > User Rights Assignment. To deny users local login, add users to the 'Deny Logon Locally' security policy.

    Be very cautious adding users to this policy, as it completely denies them logon access to the server.

  4. Right-click on Security Settings and select Reload to update the system security settings.