Technical data

JSC 36381 MARCH 30, 2000
Baseline
4-11
User Right Allows those assigned: Assigned To:
1. Access this computer To connect to the computer through
the network.
Administrators, Everyone
2. Add workstations to domain To add workstations to the domain so
that it can recognize the domain’s
user and global accounts.
(none), but this is a predefined right
for all members of the Administrators
and Server Operators local groups
that cannot be revoked.
3. Back up files and directories To back up files and directories on the
computer, no matter what his file and
directory permissions are.
Administrators, Backup Operators,
Server Operators
4. Change the system time To set the time of the computer’s
internal clock.
Administrators, Server Operators
5. Force shutdown from a remote
system
(Not currently implemented in
Windows NT 4)
Administrators, Server Operators
6. Load and unload device drivers To install and remove device drivers. Administrators
7. Log on locally To log on to the system by typing
their username and password into the
User Authentication dialog box.
Crewmembers
•
, Account Operators,
Administrators, Backup Operators,
Print Operators, Server Operators
8. Manage auditing and security
log
To specify which files, groups, and
printers to audit. This does not allow
the user to change the audit policy,
only to work within the framework
defined by a member of the
Administrators group. This right also
allows the user to view and to clear
the Security log in the Event Viewer.
Administrators
9. Restore files and directories To restore backed-up files and
directories no matter what the
permissions are on these files and
directories.
Administrators, Print Operators,
Server Operators
10. Shut down the system To shut down the Windows NT
computer system.
Crewmembers
•
, Account Operators,
Administrators, Backup Operators,
Print Operators, Server Operators
11. Take Ownership of files or other
objects
To take ownership of any object on
the computer, even if they do not
have sufficient permissions to access
the objects
Administrators
• Group added to those initially assigned by Windows NT
Table 4-8
REGULAR USER RIGHTS POLICIES