Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: User Rights Assignment - Add or Remove Users and Groups



User Rights Assignment - Add or Remove Users and Groups

How to Add or Remove Users and Groups from "User Rights Assignment" in Windows
Published by Brink
12 Dec 2011
Published by

How to Add or Remove Users and Groups from "User Rights Assignment" in Windows

information   Information
User Rights Assignment policies determines which users or groups have logon rights or privileges on the computer. This will show you how to add (assign) or remove users and groups for each User Rights Assignment policy in Vista, Windows 7, or Windows 8.

You must be logged in as an administrator to be able to do the steps in this tutorial.

Note   Note
If you remove a user or group, then that user or group will no longer be able to perform the policy on the computer.

If you add a user or group, then that user or group will now be able to perform the policy on the computer.

For more information about each specific user rights policy, see: User Rights

warning   Warning
This tutorial is not for a beginner to try.

I would highly recommend that you create a restore point before making changes to the User Rights Assignment. This way if you make a mistake and lock yourself, a user, or a group out of a policy that you didn't want to, you will be able to do a system restore at boot and select the restore point to undo the mistake.






OPTION ONE
Through Local Security Policy
1. Open the Local Security Policy window, expand Local Policies in the left pane, and select User Rights Assignment. (see screenshot below)
User Rights Assignment - Add or Remove Users and Groups-step-1.jpg
2. In the right pane of User Rights Assignment, double click on a listed Policy (ex: Shut down the system) that you wanted to add or remove a user or group, then go to step 3 and/or 4 below. (see screenshot above)

3. To Remove a User or Group from a User Rights Assignment Policy
A) Select (highlight) a listed user(s) and/or group(s) that you wanted to remove from the policy, then click on the Remove button. (see screenshot below)
NOTE: You can press and hold the CTRL key to select more than one listed user (user account name) and/or group.
Name:  Remove-1.jpg
Views: 6548
Size:  43.5 KB
B) Click on Apply. (see screenshot below)
Name:  Step-2.jpg
Views: 6452
Size:  42.5 KB
C) Go to step 4 or 5 for what you would like to do.
4. To Add a User or Group to a User Rights Assignment Policy
A) Click on the Add User or Group button. (see screenshot above)

B) Click on the Advanced button. (see screenshot below)
Name:  Add-1.jpg
Views: 6449
Size:  38.5 KB
C) Click on the Object Types button. (see screenshot below)
Name:  Add-2.jpg
Views: 6447
Size:  57.8 KB
D) Check only the Users and Groups boxes, and click on OK. (see screenshot below)
Name:  Add-3.jpg
Views: 6438
Size:  31.4 KB
E) Click on the Find Now button. (see screenshot below)
Name:  Add-4.jpg
Views: 6428
Size:  58.1 KB
F) In the bottom pane under Search results, select the user(s) and/or group(s) that you wanted to add to the policy, then click on OK. (see screenshot below)
NOTE: You can press and hold the CTRL key to select more than one listed user (user account name) and/or group.
User Rights Assignment - Add or Remove Users and Groups-add-5.jpg
G) Click on OK. (see screenshot below)
Name:  Add-6.jpg
Views: 6410
Size:  40.8 KB
H) Click on Apply. (see screenshot below)
Name:  Add-7.jpg
Views: 6396
Size:  43.3 KB
5. When finished, click on OK. (see screenshots below steps 3B and 4H)

6. Close the Local Security Policy window. (see screenshot below step 1)



OPTION TWO
Using an Elevated Command Prompt
1. If you have not already, click on the Download button below to download the ntrights.zip file originally from within the Windows Server 2003 Resource Kit Tools.
download

A) Open the downloaded .zip file, and extract (drag and drop) the ntrights.exe file to your desktop.

B) Right click on the ntrights.exe file, click on Properties, General tab, and click on the Unblock button if available.
NOTE: If you do not have a Unblock button under the General tab, then the file is already unblocked and you can continue on to step 1C.

C) Right click on the ntrights.exe file and click on Move.

D) Open Windows Explorer and navigate to and open the C:\Windows\System32 folder, then Paste the ntrights.exe file to move it here.

E) If prompted, click on Continue and Yes to approve moving the ntrights.exe file into the System32 folder, then close the Windows Explorer window.
2. Open an elevated command prompt, and do step 3 and/or 4 below.

3. To Remove a User or Group from a User Rights Assignment Policy
A) In the elevated command prompt, type the command below for what user or group that you would like to remove from what policy, and press Enter.
NOTE: See blue note box below step 4.
ntrights -U "User or Group" -R PolicyConstantName
For example: If I wanted to remove the standard users group "Users" from being able to "Shut down the system", then I would type the command below.

ntrights -U "Users" -R SeShutdownPrivilege
B) Go to step 4 or 5 for what you would like to do.
4. To Add a User or Group to a User Rights Assignment Policy
A) In the elevated command prompt, type the command below for what user or group that you would like to add to what policy, and press Enter.
NOTE: See blue note box below step 4.
ntrights -U "User or Group" +R PolicyConstantName
For example: If I wanted to add the standard users group "Users" to be able to "Shut down the system", then I would type the command below.

ntrights -U "Users" +R SeShutdownPrivilege
Note   Note
Substitute User or Group in the command with actual name of the user account or group within quotes.

Substitute PolicyConstantName in the command for the actual Constant Name at the link below for the Group Policy Name that you wanted to add or remove a user or group.
User Rights



5. When finished, close the elevated command prompt.
That's it,
Shawn





.

Comment

 User Rights Assignment - Add or Remove Users and Groups




Tutorial Tools



Similar help and support threads for2: User Rights Assignment - Add or Remove Users and Groups
Windows 7 Tutorial Category
[W7] User management on Family PC - Admin and user groups Installation & Setup
User Accounts - Add or Remove from Groups Tutorials
Win 7 single user, merging users\All Users, Default User, Public, etc? General Discussion
Solved How to setup users/groups/permissions for a user "home" folder General Discussion
Solved I am trying to make users and groups with rights and permissions General Discussion
Users with administrative rights don't get all rights Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 06:20 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33