Open Group Policy Management Console ( Start > Run > gpmc.msc). Locate Domain Controllers OU and find Default Domain Controllers Policy. Edit Default Domain Controllers Policy. Expand Computer Configuration > Policies > Windows Settings – Security Settings > User Rights ...