{"id":17,"date":"2024-04-03T19:34:24","date_gmt":"2024-04-03T16:34:24","guid":{"rendered":"https:\/\/ramitamminen.com\/?p=17"},"modified":"2024-04-03T20:49:46","modified_gmt":"2024-04-03T17:49:46","slug":"how-to-fix-the-user-rights-issue-in-security-baseline-23h2-for-intune","status":"publish","type":"post","link":"https:\/\/ramitamminen.com\/?p=17","title":{"rendered":"How to fix the User Rights issue in Security Baseline 23H2 for Intune"},"content":{"rendered":"\n

A guide to understand and resolve the problem with the User Rights section in the latest security baseline for Intune<\/em>.<\/p>\n\n\n\n

\n\n\n\n

Security baselines are predefined sets of security settings that you can apply to your devices in Intune. They help you to protect your devices from common threats and comply with industry standards and regulations. Security baselines are updated regularly to reflect the latest security best practices and recommendations from Microsoft.<\/p>\n\n\n\n

The latest security baseline for Intune is Security Baseline 23H2, which was announced in late October 2023. It includes several new features and improvements compared to the previous November 2021 version.<\/p>\n\n\n\n

You can find the full list of settings and their descriptions in the reference at Microsoft Learn. (https:\/\/learn.microsoft.com\/en-us\/mem\/intune\/protect\/security-baseline-settings-mdm-all?pivots=mdm-23h2<\/a>)<\/p>\n\n\n\n

However, there is an issue with the User Rights section in Security Baseline 23H2 that affects some devices and causes users to be locked out from the device with an error message \u201cThe sign-in method you\u2019re trying to use isn\u2019t allowed. For more info, contact your network administrator.\u201d when trying to log in. The User Rights section allows you to configure the permissions and privileges of local groups and users on your devices, such as who can log on locally, who can access the computer from the network, who can shut down the system, and so on.<\/p>\n\n\n\n

The issue is that the User Rights section might not work as expected if the operating system language of your devices is something other than English. This is because the local groups and users are named differently in different languages, and the security baseline uses the English names by default. For example, the Administrators group is called Administratoren in German, Administrateurs in French, and Administradores in Spanish.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

To mitigate the issue, you have two options:<\/p>\n\n\n\n