Before you start
Objectives: learn how can you configure user rights trough Group Policy editor.
Prerequisites: you should know what is Group Policy.
Key terms: policy, user, group, rights, assignment, editor, security
User Rights Assignment
We can open GP editor through Run menu by typing in gpedit.msc and clicking on the OK button. This opens Group Policy editor for local computer. Next, we have to navigate to the Computer Configuration, Windows Settings, Security Settings, Local Policies, and then User Rights Assignment.
Image 183.1 – User Rights Assignment Section
Let’s find and open the ‘Change the system time’ policy. Notice that Administrators and Power Users can currently change time on the system.
Image 183.2 – Change the system time Policy
Let’s remove the Power Users from this list, so that only administrators can change the system time. Let’s add Power Users the right to Debug programs. We will open ‘Debug programs’ policy, click ‘Add User or Group…’ button, and look for the Power Users group. Before we can reach groups, we have to select Groups option in the Object Types section.
Image 183.3 – Object Types
When we are finished, we can click on the OK button to exit this policy. Power Users will now be able to debug programs.
As you can see, we have a lot of options for setting up user rights. Remember that we can do this for any user or group that we create.
Prev | Next | Contents
Setting System Access Permissions on Windows XP
To set permissions on Windows XP:
- Select Start Settings Control Panel.
- In the Control Panel, open Administrative Tools.
- In Administrative Tools, open Local Security Policy.
- In the Local Security Settings window, expand the tree for Local Policies and select User Rights Assignment.
- Right-click the required user right, and select Properties. The appropriate properties window appears (for example, Log on as a batch job ).
- To add permissions:
- Click Add User or Group. The software opens the Select Users or Groups window.
- Specify the user ID that requires this permission.
- Click OK.
- Click Apply then OK to save your changes and close the Properties window.
- When you are finished, restart the machine so that the updates will take effect.