User Rights Assignment

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

This section covers:

• Access this computer from the network

• Act as part of the operating system

• Add workstations to domain

• Adjust memory quotas for a process

• Allow log on locally

• Allow log on through Terminal Services

• Back up files and directories

• Bypass traverse checking

• Change the system time

• Create a pagefile

• Create a token object

• Create global objects

• Create permanent shared objects

• Debug programs

• Deny access to this computer from the network

• Deny log on as a batch job

• Deny log on as a service

• Deny log on locally

• Deny log on through Terminal Services

• Enable computer and user accounts to be trusted for delegation

• Force shutdown from a remote system

• Generate security audits

• Impersonate a client after authentication

• Increase scheduling priority

• Load and unload device drivers

• Lock pages in memory

• Log on as a batch job

• Log on as a service

• Manage auditing and security log

• Modify firmware environment values

• Perform volume maintenance tasks

• Profile single process

• Profile system performance

• Remove computer from docking station

• Replace a process level token

• Restore files and directories

• Shut down the system

• Synchronize directory service data

• Take ownership of files or other objects