How to Set Logon User Rights with the Ntrights.exe Utility

This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.

Summary

This article describes how to set logon user rights by using the NTRights utility (Ntrights.exe).

More Information

Ntrights.exe is a Resource Kit utility that can be used to set user rights from a command prompt. Ntrights.exe can be used to manipulate the rights on either the local computer or a remote computer. The Help output for Ntrights.exe does not list all the logon rights that can be modified.

The following is a list of logon user rights that can be modified by the NTRights utility:

User RightFriendly Name
SeNetworkLogonRightAccess this computer from the network
SeInteractiveLogonRightLog on locally
SeBatchLogonRightLog on as a batch job
SeServiceLogonRightLog on as a service
SeDenyNetworkLogonRightDeny access this computer from the network
SeDenyInteractiveLogonRightDeny log on locally
SeDenyBatchLogonRightDeny log on as a batch job
SeDenyServiceLogonRightDeny log on as a service


Note: When you use the NTRights utility, the user right is case sensitive.


The following text is from the Help output from Ntrights.exe.


NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx User/Group
-m \\xxx machine to perform the operation on (default local machine)
-e xxxxx Add xxxxx to the event log
-r xxx revokes the xxx right
+r xxx grants the xxx right
valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege
คุณสมบัติ

รหัสบทความ: 279664 - การตรวจสอบครั้งสุดท้าย: 16 ธ.ค. 2009 - ฉบับแก้ไข: 1

คำติชม