How to set logon user rights by using the NTRights utility
This article was previously published under Q315276
This article has been archived. It is offered "as is" and will no longer be updated.
For a Microsoft Windows 2000 version of this article, see 279664.
This article describes how to set logon user rights by using the NTRights utility. The NTRights utility (Ntrights.exe) is included in the Windows Server 2003 Resource Kit. For information about the Resource Kit, visit the following Microsoft Web site:
You can use the NTRights utility (Ntrights.exe) to set user rights from a command prompt. You can manipulate the rights on either the local computer or a remote computer.
The following is a list of logon user rights that you can modify by using the NTRights utility.
Note that when you use the NTRights utility, the user right is case sensitive.
|SeNetworkLogonRight||Access this computer from the network|
|SeInteractiveLogonRight||Log on locally|
|SeBatchLogonRight||Log on as a batch job|
|SeServiceLogonRight||Log on as a service|
|SeDenyNetworkLogonRight||Deny access this computer from the network|
|SeDenyInteractiveLogonRight||Deny log on locally|
|SeDenyBatchLogonRight||Deny log on as a batch job|
|SeDenyServiceLogonRight||Deny log on as a service|
|SeCreateGlobalPrivilege||Create global objects|
|SeDenyRemoteInteractiveLogonRight||Deny log on through Terminal Services|
|SeEnableDelegationPrivilege||Enable computer and user accounts to be trusted for delegation|
|SeImpersonatePrivilege||Impersonate a client after authentication|
|SeManageVolumePrivilege||Perform volume maintenance tasks|
|SeRemoteInteractiveLogonRight||Allow log on through Terminal Services|
|SeSyncAgentPrivilege||Synchronize directory service data|
|SeUndockPrivilege||Remove computer from docking station|
The following text is from the Help output from Ntrights.exe.
NTRights.Exe - Beta Version by Georg Zanzen Grants/Revokes NT-Rights to a user/group usage: -u xxx User/Group -m \\xxx machine to perform the operation on (default local machine) -e xxxxx Add xxxxx to the event log -r xxx revokes the xxx right +r xxx grants the xxx right valid NTRights are: SeCreateTokenPrivilege SeAssignPrimaryTokenPrivilege SeLockMemoryPrivilege SeIncreaseQuotaPrivilege SeUnsolicitedInputPrivilege SeMachineAccountPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeSystemProfilePrivilege SeSystemTimePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeChangeNotifyPrivilege SeRemoteShutdownPrivilege
Article ID: 315276 - Last Review: 12/07/2015 08:30:19 - Revision: 4.5
Microsoft Windows Server 2003 Service Pack 1, Microsoft Windows XP Service Pack 2
- kbnosurvey kbarchive kbenv kbinfo kbsecurity KB315276