Learn Win XP Pro in 15 Minutes a Week: User Rights and User Privileges Page 2

By ServerWatch Staff (Send Email)
Posted May 23, 2003


The following is a list of all of the default User Privileges on a Windows XP Professional system.

  • Act as part of the operating system
  • Add workstations to domain
  • Adjust memory quotas for a process
  • Back up files and directories
  • Bypass traverse checking
  • Change the system time
  • Create a pagefile
  • Create a token object
  • Create permanent shared objects
  • Debug programs
  • Enable computer and user accounts to be trusted for delegation
  • Force shutdown from a remote system
  • Generate security audits
  • Increase scheduling priority
  • Load and unload device drivers
  • Lock pages in memory
  • Manage auditing and security log
  • Modify firmware environment values
  • Perform volume maintenance tasks
  • Profile single process
  • Profile system performance
  • Remove computer from docking station
  • Replace a process level token
  • Restore files and directories
  • Shut down the system
  • Synchronize directory service data
  • Take ownership of files or other objects

Of all of these listed above, the following below have no users or groups listed by default as having the explicit right to perform the given action.

  • Act as part of the operating system
  • Add workstations to domain
  • Create a token object
  • Create permanent shared objects
  • Enable computer and user accounts to be trusted for delegation
  • Lock pages in memory
  • Synchronize directory service data

Members of the built-in Administrators group on the local Windows XP Professional system have full control of the computer and can assign user rights and access control permissions to users for any of the resources. The built in Administrator account is a default member of the Administrators local group.

If this system is joined to a domain, the Domain Admins group is automatically added to the Administrators local group, giving them full control of the local system as well. Members of the built in Administrators group are granted the following User Privileges by default:

  • Adjust memory quotas for a process
  • Back up files and directories
  • Bypass traverse checking
  • Change the system time
  • Create a pagefile
  • Debug programs
  • Force shutdown from a remote system
  • Increase scheduling priority
  • Load and unload device drivers
  • Manage auditing and security log
  • Modify firmware environment variables
  • Perform volume maintenance tasks
  • Profile single process
  • Profile system performance
  • Remove computer from docking station
  • Restore files and directories
  • Shut down the system
  • Take ownership of files or other objects.

Page 2 of 4


Comment and Contribute

Your name/nickname

Your email

(Maximum characters: 1200). You have characters left.