Get your FREE Download!
|
| Hit the ground running with the new Oracle9iAS Java Edition!
It's the real deal - ALL of Oracles's full-featured, award winning Java products for $5,000 per CPU. Offer Includes: Oracle9iAS Containers for J2EE, Oracle9i JDeveloper, Oracle9iAS TopLink, Oracle HTTP Server, and Oracle Enterprise Manager.
Click to Download Oracle9iAS Java Edition FREE or call 1.800.633.0689 now to buy it for just $5,000 per CPU.
|
| |
|
Click Here - To get Oracle9iAS Java Edition!
|
|
06.19.03
User Rights - User Privileges Category |
By: Jason Zandri
The Windows XP Professional operating system allows for Rights to be configured to both individual users as well as to groups of users. Right are best described as permitted actions that are allowed to those users or groups on a specific system or allowed actions within the domain.
On a stand alone Windows XP Professional system you can view the Rights Assignments for users by using the Local Security Policy MMC.
You could also do this for a domain member as well, but in most cases in a managed environment you may find that many settings are affecting the local system via Group Policies enabled through links at the domain level and possibly at the OU levels.
[NOTES FROM THE FIELD] - For more information on Group Policy and how it works you can check out my Active Directory Group Policy article here.
You can see in the image below that both “Deny logon as a service” and “Force Shutdown from a remote system” have a different image than the rest of the Rights in the User Rights Assignment section of the Local Security Policy.
This is because those two settings are being forced onto the local system via a Group Policy Object that is linked to the domain. This Windows XP Professional system is a member of that domain and thus affected by that GPO.
|
The following is a list of all of the default User Privileges on a Windows XP Professional system.
- Act as part of the operating system
- Add workstations to domain
- Adjust memory quotas for a process
- Back up files and directories
- Bypass traverse checking
- Change the system time
- Create a pagefile
- Create a token object
- Create permanent shared objects
- Debug programs
- Enable computer and user accounts to be trusted for delegation
- Force shutdown from a remote system
- Generate security audits
- Increase scheduling priority
- Load and unload device drivers
- Lock pages in memory
- Manage auditing and security log
- Modify firmware environment values
- Perform volume maintenance tasks
- Profile single process
- Profile system performance
- Remove computer from docking station
- Replace a process level token
- Restore files and directories
- Shut down the system
- Synchronize directory service data
- Take ownership of files or other objects
Of all of these listed above, the following below have no users or groups listed by default as having the explicit right to perform the given action:
- Act as part of the operating system
- Add workstations to domain
- Create a token object
- Create permanent shared objects
- Enable computer and user accounts to be trusted for delegation
- Lock pages in memory
- Synchronize directory service data
Members of the built in Administrators group on the local Windows XP Professional system have full control of the computer and can assign user rights and access control permissions to users for any of the resources. The built in Administrator account is a default member of the Administrators local group.
If this system is joined to a domain, the Domain Admins group is automatically added to the Administrators local group, giving them full control of the local system as well. Members of the built in Administrators group are granted the following User Privileges by default:
About the Author:
Jason Zandri has worked as a consultant, systems engineer and technical trainer for a variety of corporate clients in Connecticut over the past five years and currently
holds the position of Technical Account Manager for Microsoft Corporation.
He has also written a number of COMPTIA and MICROSOFT prep tests for Boson Software2000Trainers.com and MCMCSE.com.
|
|
|
|
