MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

F16us10
Figure 16-10 Assign user rights to a group or user account.
There are two types of user rights: privileges and logon rights.
What Are Privileges?
Lesson 3 Configuring User Rights
16-25
A privilege is a user right that allows the members of the group to which it is assigned
to perform a specific task, usually one that affects an entire computer system rather
than one object. Table 16-3 explains privileges you can assign in Windows XP Professional
of which you should be aware.
Table 16-3 Privileges Available in Windows XP Professional
Privilege Description
Act As Part Of The
Operating System
Add Workstations
To Domain
Allows a process to authenticate like a user and thus gain access to the
same resources as a user. Do not grant this privilege unless you are certain
it is needed. Only low-level authentication services should require
this privilege. Processes that require this privilege should use the Local-
System account because it already has this privilege assigned.
A separate user account with this privilege allows a user or process to
build an access token, granting them more rights than they should have,
and does not provide a primary identity for tracking events in the audit
log.
Allows a user to add a computer to a domain. The user specifies the
domain being added on the computer, and an object is created in the
Computer container of Active Directory in that domain.
For this privilege to be effective, it must be assigned as part of the default
domain controller policy for the domain.