Windows 7 equivalent for ntrights.exe

Question

What is an equivalent for ntrights.exe on Windows 7?

I need it to be able to be run from the command line.

Solution 1

You can still use ntrights from the Windows Server 2003 Resource Kit Tools. Although not supported naturally, many of the tools performs flawlessly (including ntrights.exe).

Proof: Microsoft TechNet (scroll down until you find the Tool table, including NTRights.exe as one of the tools that can be used).

Solution 2

If you want to do it in Powershell you can install Powershell Community Extensions (PSCX) and use their Get-Privilege and Set-Privilege cmdlets.

Example from PSCX Help:

$p = Get-Privilege
$p.Enable('SeTimeZonePrivilege')
Set-Privilege $p
Get-Privilege | ft Name, Status -a

Name Status
---- ------
SeShutdownPrivilege Disabled
SeChangeNotifyPrivilege EnabledByDefault, Enabled
SeUndockPrivilege Disabled
SeIncreaseWorkingSetPrivilege Disabled
SeTimeZonePrivilege Enabled

By default it acts on the current user, but you can pass it a specific windows identity, of course.

Solution 3

Although its not suitable for scripting, The user management plugin for the orthodox file manager Far Manager will let you do this from the console. If you are running the 64 bit version of farmanager, you will need the 64 bit version of the plugin from the evil programmers google code project.

Comments

[Peter Mounce]

How can I get the identity to pass it, if I want to set a privilege for a different user?

[SmokedMeat]

@PeterMounce Both cmdlets have an -Identity parameter, so you should be a able to specify another user. But I haven't tried that myself.

[Peter Mounce]

I did try that, and it didn't accept a string containing the username as a valid identity; I assume therefore it wants an object.

[Peter Mounce]

yes; how do I get hold of one of those?

[Mark]

The link to the download now gives a 404.

[FireEmerald]

Note that the Get-Privilege cmdlet does NOT support all kinds of privileges. For example unsupported are SeBatchLogonRight and SeServiceLogonRight. See this issue with a reference to all supported rights.