| NT Admin Tip #334: Windows NT User Rights |
Hits: Failed to execute CGI : Win32 Error Code = 3
|
| Standard User Rights | Workstation/Standalone Server Defaults | Domain Controller Defaults |
| Add workstations to the domain SeMachineAccountPrivilege |
not applicable | no defaults |
| Access computer from the network SeNetworkLogonRight |
Admins, Everyone, Power Users | Admins, Everyone |
| Backup files and directories SeBackupPrivilege |
Admins, Backup Operators, Server Operators | Admins, Backup Operators, Server Operators |
| Change system time SeSystemTimePrivilege |
Admins, Power Users | Admins, Server Operators |
| Force shutdown from a remote system SeRemoteShutdownPrivilege |
Admins, Power Users | Admins, Server Operators |
| Load and unload device drivers SeLoadDriverPrivilege |
Admins | Admins |
| Log on Locally SeInteractiveLogonRight |
Admins, Everyone, Guests, Power Users, Users, Backup Operators | Admins, Account Operators, Backup Operators, Server Operators, Print Operators |
| Manage auditing and security log SeSecurityPrivilege |
Admins | Admins |
| Restore files and directories SeRestorePrivilege |
Admins, Backup Operators | Admins, Backup Operators, Server Operators |
| Shut down the system SeShutdownPrivilege |
Admins, Everyone, Guests, Power Users, Users | Admins, Account Operators, Backup Operators, Server Operators, Print Operators |
| Take ownership of files or other objects SeTakeOwnershipPrivilege |
Admins | Admins |
| Advanced User Rights | Workstation/Standalone Server Defaults | Domain Controller Defaults |
| Act as part of the OS SeTchPrivilege |
no defaults | no defaults |
| Bypass traverse checking SeChangeNotifyPrivilege |
Everyone | Everyone |
| Create a paging file SePagefilePrivilege |
Admins | Admins |
| Create a token object SeCreateTokenPrivilege |
no defaults | no defaults |
| Create permanent shared object SeCreatePermanentPrivilege |
no defaults | no defaults |
| Debug programs SeDebugPrivilege |
Admins | Admins |
| Generate security audits SeAuditPrivilege |
no defaults | no defaults |
| Increase quotas SeIncreaseQuotaPrivilege |
Admins | Admins |
| Increase scheduling priority SeIncreaseBasePriorityPrivilege |
Admins | Admins |
| Lock pages in memory SeLockMemoryPrivilege |
no defaults | no defaults |
| Logon as a batch job SeBatchLogonRight |
no defaults | no defaults |
| Logon as a service SeServiceLogonRight |
no defaults | no defaults |
| Modify firmware environment variables SeSystemEnvironmentPrivilege |
Admins | Admins |
| Profile single process SeProfSingleProcess |
Admins | Admins |
| Profile system performance SeSystemProfilePrivilege |
Admins | Admins |
| Replace a process-level token SeAssignPrimaryTokenPrivilege |
no defaults | no defaults |
Gives an in-depth look at the NT/Windows 95/98 system policies. Step-by-step walkthroughs.
|
|
title says it all
|
|