MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Table 16-3 Privileges Available in Windows XP Professional
Privilege Description
Load And Unload
Device Drivers
Manage Auditing
And Security Log
Modify Firmware
Environment
Values
Perform Volume
Maintenance
Tasks
Profile Single
Process
Profile System
Performance
Remove Computer
From Docking
Station
Restore Files
And Directories
Lesson 3 Configuring User Rights
16-27
Allows a user to install and uninstall Plug and Play device drivers. Non-
Plug and Play device drivers are not affected by this privilege.
By default, only Administrators have this privilege. Exercise caution when
granting this privilege. Device drivers run as trusted programs, and only
device drivers with correct digital signatures should be installed. By
default, members of the Administrators group have this privilege on
workstations, member servers, and domain controllers.
Allows a user to specify object access auditing options for individual
resources such as files, Active Directory objects, and Registry keys. A user
with this privilege can also view and clear the security log from the Event
Viewer.
By default, members of the Administrators group have this privilege on
workstations, member servers, and domain controllers. Be careful who
you assign this privilege to because they have the power to cover their
tracks by clearing the Security event log.
Allows a user to use the System Properties program to modify system
environment variables. Allows a process to use an API to modify the system
environment variables.
Allows users to run disk tools such as Disk Cleanup or Disk Defragmenter.
By default, members of the Administrators group have this privilege on
workstations, member servers, and domain controllers.
Allows a user to use performance-monitoring tools to monitor the performance
of nonsystem processes. By default, on workstations and member
servers, Administrators and Power Users have this privilege. On domain
controllers, only Administrators have this privilege.
Allows a user to use performance-monitoring tools to monitor the performance
of system processes. By default, members of the Administrators
group have this privilege on workstations, member servers, and domain
controllers.
Allows a user to undock a portable computer. By default, members of the
Administrators, Power Users, and Users groups have this privilege on
workstations and member servers.
Allows a user to restore backed up files and directories without being
assigned the appropriate file and folder permissions, and allows a user to
set any valid security principal as the owner of the object. By default,
members of the Administrators and Backup Operators groups have this
privilege on workstations, member servers, and domain controllers. On
domain controllers, members of the Server Operators group also have this
privilege.