Windows NT User Rights

by Wayne Maples [Published on 20 April 2004 / Last Updated on 20 April 2004]

 

Standard User Rights Workstation/Standalone Server Defaults Domain Controller Defaults
Add workstations to the domain
SeMachineAccountPrivilege
not applicable no defaults
Access computer from the network
SeNetworkLogonRight
Admins, Everyone, Power Users Admins, Everyone
Backup files and directories
SeBackupPrivilege
Admins, Backup Operators, Server Operators Admins, Backup Operators, Server Operators
Change system time
SeSystemTimePrivilege
Admins, Power Users Admins, Server Operators
Force shutdown from a remote system
SeRemoteShutdownPrivilege
Admins, Power Users Admins, Server Operators
Load and unload device drivers
SeLoadDriverPrivilege
Admins Admins
Log on Locally
SeInteractiveLogonRight
Admins, Everyone, Guests, Power Users, Users, Backup Operators Admins, Account Operators, Backup Operators, Server Operators, Print Operators
Manage auditing and security log
SeSecurityPrivilege
Admins Admins
Restore files and directories
SeRestorePrivilege
Admins, Backup Operators Admins, Backup Operators, Server Operators
Shut down the system
SeShutdownPrivilege
Admins, Everyone, Guests, Power Users, Users Admins, Account Operators, Backup Operators, Server Operators, Print Operators
Take ownership of files or other objects
SeTakeOwnershipPrivilege
Admins Admins
Advanced User Rights Workstation/Standalone Server Defaults Domain Controller Defaults
Act as part of the OS
SeTchPrivilege
no defaults no defaults
Bypass traverse checking
SeChangeNotifyPrivilege
Everyone Everyone
Create a paging file
SePagefilePrivilege
Admins Admins
Create a token object
SeCreateTokenPrivilege
no defaults no defaults
Create permanent shared object
SeCreatePermanentPrivilege
no defaults no defaults
Debug programs
SeDebugPrivilege
Admins Admins
Generate security audits
SeAuditPrivilege
no defaults no defaults
Increase quotas
SeIncreaseQuotaPrivilege
Admins Admins
Increase scheduling priority
SeIncreaseBasePriorityPrivilege
Admins Admins
Lock pages in memory
SeLockMemoryPrivilege
no defaults no defaults
Logon as a batch job
SeBatchLogonRight
no defaults no defaults
Logon as a service
SeServiceLogonRight
no defaults no defaults
Modify firmware environment variables
SeSystemEnvironmentPrivilege
Admins Admins
Profile single process
SeProfSingleProcess
Admins Admins
Profile system performance
SeSystemProfilePrivilege
Admins Admins
Replace a process-level token
SeAssignPrimaryTokenPrivilege
no defaults no defaults

See Also

Featured Links