Change User Rights

Keywords: 	 User Rights	NTRIGHTS.exe

---

Question:

I would need your help to find a utility or a WB command that I can use to change a users rights to 'Act as part of OS'. I want to configure DB2 Connect and need to be a valid DB2 admin which include NT admin and a username of max 8 chars. Since the agent in our programdist. is running in an account of 9 chars (SxpEngine) he is not allowed to configure DB2. Now I want to use WB, wntRunAsUser, but first I must change SxpEngine to 'Act as part of OS' to allow skript to be executed in another user context.

SxpEngine is a local account on 2.500 workstations at our branches.

Answer:

I understand there is a program in the NT resource kit. Umm... Supplement 3.

In Reskit Suppl. 3, there is an utility called NTRIGHTS.exe you can use to change user rights. Handy when you need to change user rights for the user who are going to execute wntRunAsUser.

----------------------

Also, See the function wntPrivAdd in the Win32 network extender. This requires that the user reboots, inorder for the privileges to take effect.

;'SeTcbPrivilege' This privilege identifies its holder as part 
;of the trusted computer base. Some trusted protected subsystems 
;are granted this privilege. This privilege is required to call 
;the LogonUser function. Act as part of the operating system.
AddExtender("WWWNT34I.DLL")
wntPrivAdd("\\server","server\user","SeTcbPrivilege")
Message("User", "Act as part of the operating system privilege")
;reboot
intcontrol(67,0,0,0,0)

---

Article ID:   W13525

Filename:   Change User Rights.txt