User Rights
User Right |
Groups assigned this right by default on workstation & stand-alone server | Recommended change for workstation & stand-alone server | Groups assigned this right by default on domain controller | Recommended change for domain controller |
|---|---|---|---|---|
| Log on
locally. Allows a user to log on at the computer, from the computer’s keyboard. |
Administrators, Everyone, Guests, Power Users, and Users | Deny Everyone and Guests this right. | Account Operators, Administrators, Backup Operators, Server Operators, Print Operators | No Change |
| Shut down
the system. (SeShutdownPrivilege) Allows a user to shut down Windows NT. |
Administrators, Everyone, Guests, Power Users, and Users | Deny Everyone, Guests and Users this right. | Account Operators, Administrators, Backup Operators, Server Operators, Print Operators | No Change |
| Access this
computer from the network Allows a user to connect over the network to the computer |
Administrators, Everyone and Power Users | Administrators, Power Users and Users | Administrators, Everyone | Administrators, Backup Operators, Server Operators, Print Operators, Users and Guests if it is enabled |