MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

16-24 Chapter 16 Configuring Security Settings and Internet Options
Lesson 3: Configuring User Rights
In the Local Security Settings window, under the Local Policies folder, there are three
categories of local policies available: Audit Policy, User Rights Assignment, and Security
Options. Audit Policy and Security Options are covered in later lessons in this
chapter. In this lesson, you learn how to assign user rights.
After this lesson, you will be able to
■ Configure user rights.
Estimated lesson time: 30 minutes
How to Configure User Rights
You can assign specific rights to groups or individual user accounts. To simplify the
administration of user rights, Microsoft recommends that you assign user rights only to
groups, not to individual user accounts. Each user right allows the members of the
group or the individual users assigned the right to perform a specific action, such as
backing up files or changing the system time. If a user is a member of more than one
group, the user rights applied to that user are cumulative, so the user has all the user
rights assigned to all the groups of which he or she is a member.
To configure user rights on a computer running Windows XP Professional, use these
steps:
1. Click Start, and then click Control Panel.
2. In the Control Panel window, click Performance And Maintenance.
3. In the Performance And Maintenance window, click Administrative Tools.
4. In the Administrative Tools window, double-click Local Security Policy.
5. In the Local Security Settings window, expand Local Policies, and then click User
Right Assignments.
6. In the details pane, click the user right you want to configure, and then on the
Action menu, click Properties.
The console displays the current groups and user accounts that have this user right
assigned, as shown in Figure 16-10. To add groups or user accounts, click Add
User Or Group. To remove a group or user, select the group or user, and then
click Remove.