Microsoft KB Archive/266280

= Changing User Rights from a Batch File or Command Line =

Article ID: 266280

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Server 4.0 Standard Edition

-



This article was previously published under Q266280



SUMMARY
You can use the NTRights.exe utility to grant or deny user rights to users and groups from a command line or a batch file. The NTRights.exe utility is included in the Windows NT Server 4.0 Resource Kit Supplement 3.



MORE INFORMATION
The NTRights.exe utility uses the following syntax:

ntrights +r/-r user_right-u &quot;account_name&quot; -m\\computer_name

Where:


 * +r is used to add a user right.
 * -r is used to revoke a user right.
 * user_right is the user right to grant or revoke.
 * &quot;account _name&quot; is the name of the user or group (enclosed in quotation marks) whose user rights are being modified.
 * computer_name is the name of the remote computer where the user rights are being changed. If the -m option and the computer name are not specified, the changes occur on the local computer.

To be able to set a right for a user or group, you must have Administrator privileges. The following table lists the user rights that can be changed by using the NTRights.exe utility.

NOTE: The following user rights are case-sensitive and must be typed exactly as they appear below:

EXAMPLE: You can use the NTRights.exe utility to selectively revoke the Log on locally right on the local computer so that only members of the local Administrators group can log on locally. On a Windows NT Workstation 4.0-based computer, by default the following groups have the user right Log on Locally:


 * Administrators
 * Backup Operators
 * Everyone
 * Guests
 * Power Users
 * Users

To revoke the Log on locally user right for all groups but the local Administrators group, include the following commands in a batch file:

ntrights -r SeInteractiveLogonRight -u &quot;Backup Operators&quot;

ntrights -r SeInteractiveLogonRight -u &quot;Everyone&quot;

ntrights -r SeInteractiveLogonRight -u &quot;Guests&quot;

ntrights -r SeInteractiveLogonRight -u &quot;Power Users&quot;

ntrights -r SeInteractiveLogonRight -u &quot;Users&quot;

For more information about using the NTRights.exe utility, refer to the RKTools.hlp file included in the Windows NT Server 4.0 Resource Kit Supplement 3.

Keywords: kbinfo KB266280

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.