Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Thanks so much, worked perfectly...
"Torgeir Bakken (MVP)" wrote:
> Barry wrote:
> > If someone could please help me. Im tring to figure out what entries are
> > changed in the registry. When changing the assignment rights on the change
> > system time (Local computer Policy\Computer configuration\Windows
> > Setting\Security Settings\Local Policies\User Rights Assignment\Change The
> > System Time). The 'users' that Im wanting to remove is the Administrators.
> > Please help... Thanks.
> You can't do that with registry changes.
> You should be able to change the privilege with the Win2k3 resource
> kit command line tool ntrights.exe, like this
> ntrights.exe -r SeSystemtimePrivilege -u SomeUserorGroupNameHere
> Ntrights.exe in the free Win2k3 resource kit works
> on Win2k and WinXP as well:
> Windows Server 2003 Resource Kit Tools
> (The kit will install on WinXP or later, but you can copy Ntrights.exe
> to a Win2k computer)
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
User Rights Assignment
- 2 minutes to read
Provides an overview and links to information about the User Rights Assignment security policy settings user rights that are available in Windows. User rights govern the methods by which a user can log on to a system. User rights are applied at the local device level, and they allow users to perform tasks on a device or in a domain. User rights include logon rights and permissions. Logon rights control who is authorized to log on to a device and how they can log on. User rights permissions control access to computer and domain resources, and they can override permissions that have been set on specific objects. User rights are managed in Group Policy under the User Rights Assignment item.
Each user right has a constant name and a Group Policy name associated with it. The constant names are used when referring to the user right in log events. You can configure the user rights assignment settings in the following location within the Group Policy Management Console (GPMC) under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment, or on the local device by using the Local Group Policy Editor (gpedit.msc).
For information about setting security policies, see Configure security policy settings.
The following table links to each security policy setting and provides the constant name for each. Setting descriptions contain reference information, best practices for configuring the policy setting, default values, differences between operating system versions, and considerations for policy management and security.