How to Set Logon User Rights with the Ntrights.exe Utility
This article was previously published under Q279664
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.
This article has been archived. It is offered "as is" and will no longer be updated.
This article describes how to set logon user rights by using the NTRights utility (Ntrights.exe).
Ntrights.exe is a Resource Kit utility that can be used to set user rights from a command prompt. Ntrights.exe can be used to manipulate the rights on either the local computer or a remote computer. The Help output for Ntrights.exe does not list all the logon rights that can be modified.
The following is a list of logon user rights that can be modified by the NTRights utility:
|User Right||Friendly Name|
|SeNetworkLogonRight||Access this computer from the network|
|SeInteractiveLogonRight||Log on locally|
|SeBatchLogonRight||Log on as a batch job|
|SeServiceLogonRight||Log on as a service|
|SeDenyNetworkLogonRight||Deny access this computer from the network|
|SeDenyInteractiveLogonRight||Deny log on locally|
|SeDenyBatchLogonRight||Deny log on as a batch job|
|SeDenyServiceLogonRight||Deny log on as a service|
Note: When you use the NTRights utility, the user right is case sensitive.
The following text is from the Help output from Ntrights.exe.
NTRights.Exe - Beta Version by Georg ZanzenGrants/Revokes NT-Rights to a user/groupusage: -u xxx User/Group -m \\xxx machine to perform the operation on (default local machine) -e xxxxx Add xxxxx to the event log -r xxx revokes the xxx right +r xxx grants the xxx rightvalid NTRights are: SeCreateTokenPrivilege SeAssignPrimaryTokenPrivilege SeLockMemoryPrivilege SeIncreaseQuotaPrivilege SeUnsolicitedInputPrivilege SeMachineAccountPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeSystemProfilePrivilege SeSystemtimePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeChangeNotifyPrivilege SeRemoteShutdownPrivilege
Article ID: 279664 - Last Review: 12/05/2015 22:49:17 - Revision: 3.4
Microsoft Windows 2000 Server, Microsoft Windows 2000 Professional Edition
- kbnosurvey kbarchive kbenv kbinfo KB279664