How do I grant user rights in Windows 2000?

A. A. In Windows NT 4.0 user rights are assigned via User Manager - Policies - User Rights.

User Manager has been replaced in Windows 2000 and the way to assign user rights is not obvious!

1. Start the Computer Management MMC snap-in (Start - Programs - Administrative Tools - Computer Management)
2. Expand System Tools branch then Group Policy - Windows Settings - Security Settings - Local Policies - User Rights Assignment
3. Double click on the user right you wish to grant
4. Click Add and select the users/groups. When completed click OK
5. Click OK to close the user right assignment

Remember if you are setting this for a domain controller, DC's are by default in an OU (Organisational Unit) called Domain Controllers which has a setting for User Rights which will override any setting on the local computer. To edit the Group Policy Object (GPO) for the DC OU, right click on the OU in Active Directory Users and Computers, select Properties then the Group Policy tab.

Click here to view image

---