How to set logon user rights by using the NTRights utility

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article was previously published under Q315276
This article has been archived. It is offered "as is" and will no longer be updated.
For a Microsoft Windows 2000 version of this article, see 279664.
This article describes how to set logon user rights by using the NTRights utility. The NTRights utility (Ntrights.exe) is included in the Windows Server 2003 Resource Kit. For information about the Resource Kit, visit the following Microsoft Web site:
You can use the NTRights utility (Ntrights.exe) to set user rights from a command prompt. You can manipulate the rights on either the local computer or a remote computer.

The following is a list of logon user rights that you can modify by using the NTRights utility.
User RightExplanation
SeNetworkLogonRightAccess this computer from the network
SeInteractiveLogonRightLog on locally
SeBatchLogonRightLog on as a batch job
SeServiceLogonRightLog on as a service
SeDenyNetworkLogonRightDeny access this computer from the network
SeDenyInteractiveLogonRightDeny log on locally
SeDenyBatchLogonRightDeny log on as a batch job
SeDenyServiceLogonRightDeny log on as a service
SeCreateGlobalPrivilegeCreate global objects
SeDebugPrivilegeDebug programs
SeDenyRemoteInteractiveLogonRightDeny log on through Terminal Services
SeEnableDelegationPrivilegeEnable computer and user accounts to be trusted for delegation
SeImpersonatePrivilegeImpersonate a client after authentication
SeManageVolumePrivilegePerform volume maintenance tasks
SeRemoteInteractiveLogonRightAllow log on through Terminal Services
SeSyncAgentPrivilegeSynchronize directory service data
SeUndockPrivilegeRemove computer from docking station
Note that when you use the NTRights utility, the user right is case sensitive.

The following text is from the Help output from Ntrights.exe.
   NTRights.Exe - Beta Version by Georg Zanzen   Grants/Revokes NT-Rights to a user/group   usage: -u xxx  User/Group       -m \\xxx  machine to perform the operation on (default local machine)       -e xxxxx Add xxxxx to the event log       -r xxx  revokes the xxx right       +r xxx  grants the xxx right   valid NTRights are:     SeCreateTokenPrivilege     SeAssignPrimaryTokenPrivilege     SeLockMemoryPrivilege     SeIncreaseQuotaPrivilege     SeUnsolicitedInputPrivilege     SeMachineAccountPrivilege     SeTcbPrivilege     SeSecurityPrivilege     SeTakeOwnershipPrivilege     SeLoadDriverPrivilege     SeSystemProfilePrivilege     SeSystemTimePrivilege     SeProfileSingleProcessPrivilege     SeIncreaseBasePriorityPrivilege     SeCreatePagefilePrivilege     SeCreatePermanentPrivilege     SeBackupPrivilege     SeRestorePrivilege     SeShutdownPrivilege     SeAuditPrivilege     SeSystemEnvironmentPrivilege     SeChangeNotifyPrivilege     SeRemoteShutdownPrivilege				

Article ID: 315276 - Last Review: 12/07/2015 08:30:19 - Revision: 4.5

Microsoft Windows Server 2003 Service Pack 1, Microsoft Windows XP Service Pack 2

  • kbnosurvey kbarchive kbenv kbinfo kbsecurity KB315276