Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. How to set logon user rights by using the NTRights utility

How to set logon user rights by using the NTRights utility

View products that this article applies to.

Summary

This article describes how to set logon user rights by using the NTRights utility. The NTRights utility (Ntrights.exe) is included in the Windows Server 2003 Resource Kit. For information about the Resource Kit, visit the following Microsoft Web site:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

↑ Back to the top

More information

You can use the NTRights utility (Ntrights.exe) to set user rights from a command prompt. You can manipulate the rights on either the local computer or a remote computer.

The following is a list of logon user rights that you can modify by using the NTRights utility.
User RightExplanation
SeNetworkLogonRightAccess this computer from the network
SeInteractiveLogonRightLog on locally
SeBatchLogonRightLog on as a batch job
SeServiceLogonRightLog on as a service
SeDenyNetworkLogonRightDeny access this computer from the network
SeDenyInteractiveLogonRightDeny log on locally
SeDenyBatchLogonRightDeny log on as a batch job
SeDenyServiceLogonRightDeny log on as a service
SeCreateGlobalPrivilegeCreate global objects
SeDebugPrivilegeDebug programs
SeDenyRemoteInteractiveLogonRightDeny log on through Terminal Services
SeEnableDelegationPrivilegeEnable computer and user accounts to be trusted for delegation
SeImpersonatePrivilegeImpersonate a client after authentication
SeManageVolumePrivilegePerform volume maintenance tasks
SeRemoteInteractiveLogonRightAllow log on through Terminal Services
SeSyncAgentPrivilegeSynchronize directory service data
SeUndockPrivilegeRemove computer from docking station
Note that when you use the NTRights utility, the user right is case sensitive.

The following text is from the Help output from Ntrights.exe. 
   NTRights.Exe - Beta Version by Georg Zanzen
   Grants/Revokes NT-Rights to a user/group
   usage: -u xxx  User/Group
       -m \\xxx  machine to perform the operation on (default local machine)
       -e xxxxx Add xxxxx to the event log
       -r xxx  revokes the xxx right
       +r xxx  grants the xxx right
   valid NTRights are:
     SeCreateTokenPrivilege
     SeAssignPrimaryTokenPrivilege
     SeLockMemoryPrivilege
     SeIncreaseQuotaPrivilege
     SeUnsolicitedInputPrivilege
     SeMachineAccountPrivilege
     SeTcbPrivilege
     SeSecurityPrivilege
     SeTakeOwnershipPrivilege
     SeLoadDriverPrivilege
     SeSystemProfilePrivilege
     SeSystemTimePrivilege
     SeProfileSingleProcessPrivilege
     SeIncreaseBasePriorityPrivilege
     SeCreatePagefilePrivilege
     SeCreatePermanentPrivilege
     SeBackupPrivilege
     SeRestorePrivilege
     SeShutdownPrivilege
     SeAuditPrivilege
     SeSystemEnvironmentPrivilege
     SeChangeNotifyPrivilege
     SeRemoteShutdownPrivilege

↑ Back to the top

Keywords: KB315276, kbsecurity, kbinfo, kbenv

↑ Back to the top

Article Info
Article ID : 315276
Revision : 9
Created on : 1/31/2007
Published on : 1/31/2007
Exists online : False
Views : 1208