If the user does not have permission on the %SystemRoot%\System32 folder, they will not be able to logon.

The default permissions on this folder is Everyone - Change.

You can grant the user specific permissions, if you don't want the Everyone group to have Change permissions.