Checking user rights in Windows NT/2000/XP/2003
OBSOLETE
In order to perform certain tasks, a user account may need particular rights. These rights can include the right to
- Log on as a service
- Log on as a batch job.
The right to 'Log on as a service' is used as an example below. Other rights such as 'Log on as a batch job' are selected from the same list.
What to do
To check the rights that an account has, and add a new right:
- On a Windows NT workstation
- At the taskbar, click Start|Programs|Administrative Tools (Common)|User Manager.
- In the User Manager window, click the required account.
- On the Policies menu, click 'User Rights'.
- In 'User Rights Policy', select 'Show Advanced User Rights'.
- Click the drop-down arrow on the Right box and select 'Log on as a service'.
- Check to see if the required user is listed as having this right.
- To add a user: click 'Add', in 'Add Users and Groups' click 'Show Users', then scroll down the Names list to the required user and click it. Click 'Add', and when the required user is displayed in the Add Names list, click 'OK' twice then close the User Manager window.
- On a Windows NT domain controller
At the taskbar, select Start|Programs|Administrative Tools|User Manager for Domains - Select Policies|User Rights
- Select 'Show Advanced User Rights' then choose 'Log on as a service'
- Check to see if the required user is listed as having this right.
To add a user: click Add|Show Users, highlight the chosen account then click 'Add' and 'OK'. Click 'OK'. - On a Windows 2000 server
- At the taskbar, select Start|Settings|Control Panel
- Double-click 'Local Security Policy'
- Within Security Settings|Local Policies, select 'User Rights assignment'
- On the right, double-click 'Log on as a service'
- Check to see if the required user is listed as having this right.
To add a user: click 'Add', highlight the chosen account and click 'Add'. Click 'OK'.
- On Windows 2000 Professional
- At the taskbar, select Start|Settings|Control Panel
- Double-click 'Administrative tools'
- Double-click 'Local Security Policy'
- Within Local Security Settings|Local Policies, select 'User Rights assignment'
- On the right, double-click 'Log on as a service'
- Check to see if the required user is listed as having this right.
To add a user: click 'Add', highlight the chosen account and click 'Add'. Click 'OK' twice to close.
- On Windows XP Professional
- At the taskbar, select Start|Control Panel
- Select 'Performance and Maintenance'
- Select 'Administrative tools'
- Double-click 'Local Security Policy'
- Within Local Security Settings|Local Policies, select 'User Rights Assignment'
- On the right, double-click 'Log on as a service'
- Check to see if the required user is listed as having this right.
To add a user: click 'Add User or Group', type the first letter of the relevant username, click 'Check Names', select the relevant username, and click 'OK' three times to close.
- On Windows 2003 Server
- At the taskbar, select Start|Programs|Administrative Tools|Local Security Policy
- Within Local Security Settings|Local Policies, select 'User Rights Assignment'
- On the right, double-click 'Log on as a service'
- Check to see if the required user is listed as having this right.
To add a user: click 'Add User or Group', type the first letter of the relevant username, click 'Check Names', select the relevant username, and click 'OK' three times to close.
If you need more information or guidance, then please contact technical support.
- Article ID: 12196
- Created: 17 Nov 2004
- Last updated: 8 Oct 2008
