Allow log on locally

Grants interactive console sign-in on a machine to the accounts it lists.

In the Ultra Transcenders books

Each book explains Allow log on locally in context, with comparison tables and the common traps.

AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.