User Rights Policy

You can use the User Rights policy related properties and methods to manage privileges such as logging on locally or replacing a process level token.

Note: Some of the following methods require the name of a privilege. These are described in IADsNTPolicy Privileges

Property/Method	Description
GetAccountPrivileges	Returns all privileges for a given account (User or Group)
GetAccountsWithPrivilege	Returns the names of all accounts (User or Group) that have a given privilege
RemoveAccountPrivilege	Removes a privilege from a User or Group
RemoveAccountPrivilegeEx	Removes the specified privileges from a User or Group
SetAccountPrivilege	Assigns a privilege to a User or Group
SetAccountPrivilegeEx	Assigns the specified privileges to a User or Group