Creating user with SeSecurityPrivilege

[w7explorer]

Hi,
I notice that on Windows 7 the Administrator has SeSecurityPrivilege. I see this by starting a CMD prompt with Run As Administrator and typing:

whoami /all

I want to give another user (bkupuser1) the SeSecurityPrivilege.

First I added the user in the Backup Operators group, using

lusrmgr.msc

However when I started a CMD prompt as the user and did

whoami /all

I could see the privilege was not granted to the user. I tried:

gpupdate /force

but that did not work either.
I then started (Group Policy Editor):

gpedit.msc

this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1 - However, when I started a CMD prompt as the user and did:

whoami /all

I could see the privilege was not granted to the user. I tried

gpupdate /force

but still no joy

I rebooted, still no good.
I tried using another program rsop.msc but that was no good either.
This is a very serious problem, as I do not wish to give out the Administrator user account. It should be possible to create a regular user account and assign the appropriate privileges.

 

[w7explorer]

[FONT=&quot]just want to add to this....

[/FONT][FONT=&quot] [/FONT]I [FONT=&quot]have a support team and want them to do most admin things, but not want to give them the administrator password, but the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003.[/FONT]

[FONT=&quot]I want to add the Se_Security_Privilege so these users can alter ACLs.[/FONT]

 

[sup3rsprt]

I then started (Group Policy Editor):

gpedit.msc

this looked like what I wanted. It allowed me to add any number of special privileges to any user, and I did add SeSecurityPrivilege to the bkupuser1

Are you referring to "Manage auditing and security log" beneath user rights assignment?

the administrators group on windows 7, doesn’t seem to be really full administrator like on windows 2003

Yes that seems to be the case. In Windows 7 the "Administrator" account has more power than any other account in the Administrators group.