This article describes how to set logon user rights by using the NTRights utility (Ntrights.exe).

Ntrights.exe is a Resource Kit utility that can be used to set user rights from a command prompt. Ntrights.exe can be used to manipulate the rights on either the local computer or a remote computer. The Help output for Ntrights.exe does not list all the logon rights that can be modified.

The following is a list of logon user rights that can be modified by the NTRights utility:

User Right	Friendly Name
SeNetworkLogonRight	Access this computer from the network
SeInteractiveLogonRight	Log on locally
SeBatchLogonRight	Log on as a batch job
SeServiceLogonRight	Log on as a service
SeDenyNetworkLogonRight	Deny access this computer from the network
SeDenyInteractiveLogonRight	Deny log on locally
SeDenyBatchLogonRight	Deny log on as a batch job
SeDenyServiceLogonRight	Deny log on as a service

Note: When you use the NTRights utility, the user right is case sensitive.

The following text is from the Help output from Ntrights.exe.

NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx  User/Group
       -m \\xxx  machine to perform the operation on (default local machine)
       -e xxxxx Add xxxxx to the event log
       -r xxx  revokes the xxx right
       +r xxx  grants the xxx right
valid NTRights are:
  SeCreateTokenPrivilege
  SeAssignPrimaryTokenPrivilege
  SeLockMemoryPrivilege
  SeIncreaseQuotaPrivilege
  SeUnsolicitedInputPrivilege
  SeMachineAccountPrivilege
  SeTcbPrivilege
  SeSecurityPrivilege
  SeTakeOwnershipPrivilege
  SeLoadDriverPrivilege
  SeSystemProfilePrivilege
  SeSystemtimePrivilege
  SeProfileSingleProcessPrivilege
  SeIncreaseBasePriorityPrivilege
  SeCreatePagefilePrivilege
  SeCreatePermanentPrivilege
  SeBackupPrivilege
  SeRestorePrivilege
  SeShutdownPrivilege
  SeAuditPrivilege
  SeSystemEnvironmentPrivilege
  SeChangeNotifyPrivilege
  SeRemoteShutdownPrivilege