Article ID: 266280 - View products that this article applies to.
This article was previously published under Q266280
You can use the NTRights.exe utility to grant or deny user rights to users and groups from a command line or a batch file. The NTRights.exe utility is included in the Windows NT Server 4.0 Resource Kit Supplement 3.
The NTRights.exe utility uses the following syntax:
ntrights +r/-r user_right-u "account_name" -m\\computer_name
To be able to set a right for a user or group, you must have Administrator privileges. The following table lists the user rights that can be changed by using the NTRights.exe utility.
NOTE: The following user rights are case-sensitive and must be typed exactly as they appear below:
Collapse this tableExpand this table
EXAMPLE: You can use the NTRights.exe utility to selectively revoke the Log on locally right on the local computer so that only members of the local Administrators group can log on locally. On a Windows NT Workstation 4.0-based computer, by default the following groups have the user right Log on Locally:
To revoke the Log on locally user right for all groups but the local Administrators group, include the following commands in a batch file:
ntrights -r SeInteractiveLogonRight -u "Backup Operators"
ntrights -r SeInteractiveLogonRight -u "Everyone"
ntrights -r SeInteractiveLogonRight -u "Guests"
ntrights -r SeInteractiveLogonRight -u "Power Users"
ntrights -r SeInteractiveLogonRight -u "Users"
For more information about using the NTRights.exe utility, refer to the RKTools.hlp file included in the Windows NT Server 4.0 Resource Kit Supplement 3.
Contact us for more help
Connect with Answer Desk for expert help.