Ntrights.exe is a classic example of "small tool, big impact." Even in the age of modern Windows administration, this utility provides a fast, reliable, and scriptable method for managing critical user privileges. By understanding its syntax and proper application, administrators can significantly improve their security automation tasks.
| Privilege Constant | User-Friendly Name | Description | |-------------------|--------------------|-------------| | SeInteractiveLogonRight | "Allow log on locally" | Right to log on at the physical console. | | SeNetworkLogonRight | "Access this computer from the network" | Right to connect via SMB/RPC. | | SeBackupPrivilege | "Back up files and directories" | Bypass file system ACLs for backup. | | SeShutdownPrivilege | "Shut down the system" | Right to power off the machine. | | SeTakeOwnershipPrivilege | "Take ownership of files" | Ability to take ownership of securable objects. | | SeRemoteShutdownPrivilege | "Force shutdown from a remote system" | High-risk privilege. | ntrights exe
ntrights +r -u [-m \\Computer] [-e "Entry"] ntrights -r -u [-m \\Computer] [-e "Entry"] Use code with caution. Components: : Grant a user right. -r : Revoke a user right. Ntrights
NTRights does not have a built-in "list" function to show current rights. To verify the change, you should either: | | SeNetworkLogonRight | "Access this computer from