Windows NT User Rights
These rights are set using the "User Manager". Two types of user rights are "basic" and "advanced". Additional NT server user rights beyond NTWS:
- Add workstations to domain - Administrators, Account Operators
- Force shutdown from a remote system. - Administrators, server operators
- Manage security log and auditing - Administrators
To see advanced user rights, check the "Show Advanced User Rights" checkbutton.
Equivalent NTWS User Rights Policies showing Server groups
- Shutdown the computer from a remote location - Administrators, Power users.
- Access to the computer via the network - Administrators, everyone
- Use the computer locally - Administrators, account operators, server operators, backup operators, print operators
- Backup and restore directories and files - Administrators, backup operators, server operators
- Change time - Administrators, server operators.
- Delete or add device drivers - Administrators
- Change the security logging policy - Administrators
- Shut the system down - Administrators, account operators, server operators, backup operators, print operators
- Take file ownership - Administrators
- Load/unload device drivers - Administrators
Normally users cannot by default logon locally on an NT server unless the group "Domaun Users" are given the right to log on locally.
Advanced User Rights
- Bypass Traverse checking - Everyone. Allows free directory tree viewing reguardless of permissions.
- Create a pagefile - Administrators
- Logon as a service