You are currently offline, waiting for your internet to reconnect

How to Set Logon User Rights with the Ntrights.exe Utility

This article was previously published under Q279664
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.
This article describes how to set logon user rights by using the NTRights utility (Ntrights.exe).
Ntrights.exe is a Resource Kit utility that can be used to set user rights from a command prompt. Ntrights.exe can be used to manipulate the rights on either the local computer or a remote computer. The Help output for Ntrights.exe does not list all the logon rights that can be modified.

The following is a list of logon user rights that can be modified by the NTRights utility:

User RightFriendly Name
SeNetworkLogonRightAccess this computer from the network
SeInteractiveLogonRightLog on locally
SeBatchLogonRightLog on as a batch job
SeServiceLogonRightLog on as a service
SeDenyNetworkLogonRightDeny access this computer from the network
SeDenyInteractiveLogonRightDeny log on locally
SeDenyBatchLogonRightDeny log on as a batch job
SeDenyServiceLogonRightDeny log on as a service

Note: When you use the NTRights utility, the user right is case sensitive.

The following text is from the Help output from Ntrights.exe.
NTRights.Exe - Beta Version by Georg ZanzenGrants/Revokes NT-Rights to a user/groupusage: -u xxx  User/Group       -m \\xxx  machine to perform the operation on (default local machine)       -e xxxxx Add xxxxx to the event log       -r xxx  revokes the xxx right       +r xxx  grants the xxx rightvalid NTRights are:  SeCreateTokenPrivilege  SeAssignPrimaryTokenPrivilege  SeLockMemoryPrivilege  SeIncreaseQuotaPrivilege  SeUnsolicitedInputPrivilege  SeMachineAccountPrivilege  SeTcbPrivilege  SeSecurityPrivilege  SeTakeOwnershipPrivilege  SeLoadDriverPrivilege  SeSystemProfilePrivilege  SeSystemtimePrivilege  SeProfileSingleProcessPrivilege  SeIncreaseBasePriorityPrivilege  SeCreatePagefilePrivilege  SeCreatePermanentPrivilege  SeBackupPrivilege  SeRestorePrivilege  SeShutdownPrivilege  SeAuditPrivilege  SeSystemEnvironmentPrivilege  SeChangeNotifyPrivilege  SeRemoteShutdownPrivilege				

Article ID: 279664 - Last Review: 10/31/2006 02:49:43 - Revision: 3.4

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional Edition
  • kbenv kbinfo KB279664