Network Administration & Consulting Services

NTrights for XP/2003

Posted Friday, 21 March 2008 by Algo

Ntrights.exe from Windows Server 2003 Resource Kit Tools can help you to give some privilege to limited users if you do not have Active Directory or XPpro.
One of them for exemple: Limited user can't get access to change system time and date in tray. With Ntrights tool you can grant privilege to change system time and date.

*This command requires Administrator rights and does not run on NT 4.0 Here how you can edit user account some privileges: Edit user account Privileges. Syntax NTRIGHTS +r Right -u UserOrGroup [-m \\Computer] [-e Entry] NTRIGHTS -r Right -u UserOrGroup [-m \\Computer] [-e Entry] Key: +/-r Right Grant or revoke one of the rights listed below. -u UserOrGroup Who the rights are to be granted or revoked to. -m \\Computer The computer (machine) on which to perform the operation. The default is the local computer. -e Entry Add a text string 'Entry' to the computer's event log. Below are the Privileges that can be granted or revoked. All are case-sensitive. Privilege Meaning SeAssignPrimaryTokenPrivilege Replace a process level token SeAuditPrivilege Generate security audits SeBackupPrivilege Back up files and directories SeBatchLogonRight Log on as a batch job SeChangeNotifyPrivilege Bypass traverse checking SeCreateGlobalPrivilege Create global objects* SeCreatePagefilePrivilege Create a pagefile SeCreatePermanentPrivilege Create permanent shared objects. SeCreateTokenPrivilege Create a token object SeDenyBatchLogonRight Deny log on as a batch job SeDenyInteractiveLogonRight Deny log on locally SeDenyNetworkLogonRight Deny access this computer from the network SeDenyServiceLogonRight Deny log on as a service SeDebugPrivilege Debug programs SeEnableDelegationPrivilege Enable computer and user accounts to be trusted for delegation SeImpersonatePrivilege Impersonate a client after authentication* SeIncreaseBasePriorityPrivilege Increase scheduling priority SeIncreaseQuotaPrivilege Increase quotas SeInteractiveLogonRight Log on locally SeLoadDriverPrivilege Load and unload device drivers SeLockMemoryPrivilege Lock pages in memory SeMachineAccountPrivilege Add workstations to domain SeNetworkLogonRight Access this computer from the network SeProfileSingleProcessPrivilege Profile single process SeRemoteShutdownPrivilege Force shutdown from a remote system SeRestorePrivilege Restore files and directories SeSecurityPrivilege Manage auditing and security log SeServiceLogonRight Log on as a service SeShutdownPrivilege Shut down the system SeSyncAgentPrivilege Synchronize directory service data SeSystemEnvironmentPrivilege Modify firmware environment values SeSystemProfilePrivilege Profile system performance SeSystemtimePrivilege Change the system time SeTakeOwnershipPrivilege Take ownership of files or other objects SeTcbPrivilege Act as part of the operating system SeUndockPrivilege Remove computer from docking station SeUnsolicitedInputPrivilege Read unsolicited input from a terminal device Example: Allow user Algo to change system time am date. ntrights +r SeSystemtimePrivilege -u Algo Revoke the above ntrights +r SeSystemtimePrivilege -u Algo You can download Windows Server 2003 Resource Kit Tools from Microsoft's site or google.