Standard User Rights | Workstation/Standalone Server Defaults | Domain Controller Defaults |
Add workstations to the domain SeMachineAccountPrivilege | not applicable | no defaults |
Access computer from the network SeNetworkLogonRight | Admins, Everyone, Power Users | Admins, Everyone |
Backup files and directories SeBackupPrivilege | Admins, Backup Operators, Server Operators | Admins, Backup Operators, Server Operators |
Change system time SeSystemTimePrivilege | Admins, Power Users | Admins, Server Operators |
Force shutdown from a remote system SeRemoteShutdownPrivilege | Admins, Power Users | Admins, Server Operators |
Load and unload device drivers SeLoadDriverPrivilege | Admins | Admins |
Log on Locally SeInteractiveLogonRight | Admins, Everyone, Guests, Power Users, Users, Backup Operators | Admins, Account Operators, Backup Operators, Server Operators, Print Operators |
Manage auditing and security log SeSecurityPrivilege | Admins | Admins |
Restore files and directories SeRestorePrivilege | Admins, Backup Operators | Admins, Backup Operators, Server Operators |
Shut down the system SeShutdownPrivilege | Admins, Everyone, Guests, Power Users, Users | Admins, Account Operators, Backup Operators, Server Operators, Print Operators |
Take ownership of files or other objects SeTakeOwnershipPrivilege | Admins | Admins |
Advanced User Rights | Workstation/Standalone Server Defaults | Domain Controller Defaults |
Act as part of the OS SeTchPrivilege | no defaults | no defaults |
Bypass traverse checking SeChangeNotifyPrivilege | Everyone | Everyone |
Create a paging file SePagefilePrivilege | Admins | Admins |
Create a token object SeCreateTokenPrivilege | no defaults | no defaults |
Create permanent shared object SeCreatePermanentPrivilege | no defaults | no defaults |
Debug programs SeDebugPrivilege | Admins | Admins |
Generate security audits SeAuditPrivilege | no defaults | no defaults |
Increase quotas SeIncreaseQuotaPrivilege | Admins | Admins |
Increase scheduling priority SeIncreaseBasePriorityPrivilege | Admins | Admins |
Lock pages in memory SeLockMemoryPrivilege | no defaults | no defaults |
Logon as a batch job SeBatchLogonRight | no defaults | no defaults |
Logon as a service SeServiceLogonRight | no defaults | no defaults |
Modify firmware environment variables SeSystemEnvironmentPrivilege | Admins | Admins |
Profile single process SeProfSingleProcess | Admins | Admins |
Profile system performance SeSystemProfilePrivilege | Admins | Admins |
Replace a process-level token SeAssignPrimaryTokenPrivilege | no defaults | no defaults |