User Rights Policy

You can use the User Rights policy related properties and methods to manage privileges such as logging on locally or replacing a process level token.

Note: Some of the following methods require the name of a privilege. These are described in IADsNTPolicy Privileges

Property/Method

Description

GetAccountPrivileges

Returns all privileges for a given account (User or Group)

GetAccountsWithPrivilege

Returns the names of all accounts (User or Group) that have a given privilege

RemoveAccountPrivilege

Removes a privilege from a User or Group

RemoveAccountPrivilegeEx

Removes the specified privileges from a User or Group

SetAccountPrivilege

Assigns a privilege to a User or Group

SetAccountPrivilegeEx

Assigns the specified privileges to a User or Group

 

See Also