Have you ever needed to script granting or revoking user rights, or maybe just querying for user rights? If the answer is “Yes”, most likely you have had to use NTRIGHTS from the good old Windows Server 2003 Resource Kit or do some funky magic around SECEDIT. It is a pitty there is no native PowerShell way to manage stuff like this. But, it is a good thing there are MVPs like Tony who has created a PowerShell module that does some interesting things around user rights locally and remotely on Windows systems. All credits for this PowerShell module of course go to Tony as he build and owns it.
–
The PowerShell Module to manage user rights can be downloaded from here.
–
Benefits:
- No dependency on external files
- Can modify any user right; is not limited to "Logon as a Service"
- Can add/remove rights from the current process token
- Doesn’t write temporary files during operation
- Fully pipeline-able
- Pure PowerShell implementation
- Supports changing user rights on remote machines
- Fully documented and self contained
- No code hidden in DLL files or other compiled libraries; fully transparent
–
Requirements:
- PowerShell 3.0
- Administrative rights on target computer, or elevation on local computer
- Tested on Windows 10, Server 2012 R2, Server 2016, Server Core 1709
–
Available Cmdlets:
- Grant-UserRight
- Revoke-UserRight
- Get-UserRightsGrantedToAccount
- Get-AccountsWithUserRight
- Grant-TokenPrivilege
- Revoke-TokenPrivilege
–
Cheers,
Jorge
————————————————————————————————————————————————————-
This posting is provided "AS IS" with no warranties and confers no rights!
Always evaluate/test everything yourself first before using/implementing this in production!
This is today’s opinion/technology, it might be different tomorrow and will definitely be different in 10 years!
DISCLAIMER: https://jorgequestforknowledge.wordpress.com/disclaimer/
————————————————————————————————————————————————————-
########################### Jorge’s Quest For Knowledge ##########################
#################### http://JorgeQuestForKnowledge.wordpress.com/ ###################
————————————————————————————————————————————————————-