User Rights

User rights are defined as a default set of capabilities assigned to built-in domain local groups that define what members of these groups can and cannot do on the network. They consist of Privileges and Logon Rights.

You can manage these predefined user rights from the Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment node in the Group Policy Management Editor. When focused on the Default Domain Controllers Policy GPO, you can view the default rights assignments, as shown in Figure 6.18. To modify the assignment of any right, right-click it and choose Properties. In the Properties dialog box, click Add User or Group, and in the Add User or Group dialog box, type or browse to the required user or group. Then click OK.