Select the product you need help with

How to set logon user rights by using the NTRights utility

Article ID: 315276 - View products that this article applies to.

This article was previously published under Q315276

For a Microsoft Windows 2000 version of this article, see 279664

(http://support.microsoft.com/kb/279664/EN-US/ )

SUMMARY

This article describes how to set logon user rights by using the NTRights utility. The NTRights utility (Ntrights.exe) is included in the Windows Server 2003 Resource Kit. For information about the Resource Kit, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

(http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en)

MORE INFORMATION

You can use the NTRights utility (Ntrights.exe) to set user rights from a command prompt. You can manipulate the rights on either the local computer or a remote computer.

The following is a list of logon user rights that you can modify by using the NTRights utility.

Collapse this tableExpand this table

User Right	Explanation
SeNetworkLogonRight	Access this computer from the network
SeInteractiveLogonRight	Log on locally
SeBatchLogonRight	Log on as a batch job
SeServiceLogonRight	Log on as a service
SeDenyNetworkLogonRight	Deny access this computer from the network
SeDenyInteractiveLogonRight	Deny log on locally
SeDenyBatchLogonRight	Deny log on as a batch job
SeDenyServiceLogonRight	Deny log on as a service
SeCreateGlobalPrivilege	Create global objects
SeDebugPrivilege	Debug programs
SeDenyRemoteInteractiveLogonRight	Deny log on through Terminal Services
SeEnableDelegationPrivilege	Enable computer and user accounts to be trusted for delegation
SeImpersonatePrivilege	Impersonate a client after authentication
SeManageVolumePrivilege	Perform volume maintenance tasks
SeRemoteInteractiveLogonRight	Allow log on through Terminal Services
SeSyncAgentPrivilege	Synchronize directory service data
SeUndockPrivilege	Remove computer from docking station

Note that when you use the NTRights utility, the user right is case sensitive.

The following text is from the Help output from Ntrights.exe.

   NTRights.Exe - Beta Version by Georg Zanzen
   Grants/Revokes NT-Rights to a user/group
   usage: -u xxx  User/Group
       -m \\xxx  machine to perform the operation on (default local machine)
       -e xxxxx Add xxxxx to the event log
       -r xxx  revokes the xxx right
       +r xxx  grants the xxx right
   valid NTRights are:
     SeCreateTokenPrivilege
     SeAssignPrimaryTokenPrivilege
     SeLockMemoryPrivilege
     SeIncreaseQuotaPrivilege
     SeUnsolicitedInputPrivilege
     SeMachineAccountPrivilege
     SeTcbPrivilege
     SeSecurityPrivilege
     SeTakeOwnershipPrivilege
     SeLoadDriverPrivilege
     SeSystemProfilePrivilege
     SeSystemTimePrivilege
     SeProfileSingleProcessPrivilege
     SeIncreaseBasePriorityPrivilege
     SeCreatePagefilePrivilege
     SeCreatePermanentPrivilege
     SeBackupPrivilege
     SeRestorePrivilege
     SeShutdownPrivilege
     SeAuditPrivilege
     SeSystemEnvironmentPrivilege
     SeChangeNotifyPrivilege
     SeRemoteShutdownPrivilege