To grant a user local logon rights for various different services, first launch the group policy management editor and right click to edit the Default Domain Controllers Policy as shown below.

Expand the computer configuration tree as shown below to expose the “Allow logon locally” policy.

Double-click “Allow logon locally” to open the properties and add the user in scope. Image shown below.

Click apply and ok, then close all windows to apply the policy changes. Replication may take some time, however the user and/or group added should now be granted the right to log on locally when replication is complete.