Local Policies User Rights Assignment Registry Editor

Published by


Administrator



 


How to Change User Rights Assignment Security Policy Settings in Windows 10


   Information

User Rights Assignment policies govern the methods by which a user can log on to a system. User rights are applied at the local device level, and they allow users to perform tasks on a device or in a domain. User rights include logon rights and permissions. Logon rights control who is authorized to log on to a device and how they can log on. User rights permissions control access to computer and domain resources, and they can override permissions that have been set on specific objects.

Each group in Windows has its own default rights and permissions. When a user is a member of a group, the user will be assigned the rights and permissions of the group.

This tutorial will show you how to change User Rights Assignment security policy settings to control users and groups ability to perform tasks in Windows 10.

You must be signed in as an administrator to change User Rights Assignment.

   Note

If you remove a user or group from a user right policy, then that user or group will no longer be able to perform the policy on the local PC.

If you add a user or group to a user right policy, then that user or group will now be able to perform the actions of the policy on the local PC.


CONTENTS:
  • Option One: To Add Users and Groups for User Rights Assignment in Local Security Policy
  • Option Two: To Remove Users and Groups for User Rights Assignment in Local Security Policy
  • Option Three: To Add and Remove Users and Groups for User Rights Assignment in Command Prompt





OPTION ONE
To Add Users and Groups for User Rights Assignment in Local Security Policy

   Note

Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Educationeditions.

All editions can use Option Three below.


1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, and click/tap on User Rights Assignment. (see screenshot below step 3)

3. In the right pane of User Rights Assignment, double click/tap on the policy (ex: "Shut down the system") you want to add users and/or groups to. (see screenshot below)


4. Click/tap on the Add User or Group button. (see screenshot below)


5. Click/tap on the Object Types button. (see screenshot below)


6. Check all the boxes for Object types, and click/tap on the OK. (see screenshot below)


7. Click/tap on the Advanced button. (see screenshot below)


8. Click/tap on the Find Now button, select the name of the user or group (ex: "Everyone") you want to add, and click/tap on OK. (see screenshot below)
   Note

If you like, you can press and hold the Ctrl key to select more than one user and/or group.



9. Click/tap on OK. (see screenshot below)


10. Click/tap on OK. (see screenshot below)


11. When finished, you can close Local Users and Groups if you like.






OPTION TWO
To Remove Users and Groups for User Rights Assignment in Local Security Policy

   Note

Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Educationeditions.

All editions can use Option Three below.


1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Expand open Local Policies in the left pane of Local Security Policy, and click/tap on User Rights Assignment. (see screenshot below step 3)

3. In the right pane of User Rights Assignment, double click/tap on the policy (ex: "Shut down the system") you want to remove users and/or groups from. (see screenshot below)


4. Select the user or group (ex: "Everyone") you want to remove, and click/tap on the Remove button. (see screenshot below)
   Note

If you like, you can press and hold the Ctrl key to select more than one user and/or group.



5. Click/tap on OK. (see screenshot below)


6. When finished, you can close Local Security Policy if you like.






OPTION THREE
To Add and Remove Users and Groups for User Rights Assignment in Command Prompt


That's it,
Shawn


User Rights Assignment

  • 2 minutes to read
  • Contributors

Applies to

Provides an overview and links to information about the User Rights Assignment security policy settings user rights that are available in Windows. User rights govern the methods by which a user can log on to a system. User rights are applied at the local device level, and they allow users to perform tasks on a device or in a domain. User rights include logon rights and permissions. Logon rights control who is authorized to log on to a device and how they can log on. User rights permissions control access to computer and domain resources, and they can override permissions that have been set on specific objects. User rights are managed in Group Policy under the User Rights Assignment item.

Each user right has a constant name and a Group Policy name associated with it. The constant names are used when referring to the user right in log events. You can configure the user rights assignment settings in the following location within the Group Policy Management Console (GPMC) under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment, or on the local device by using the Local Group Policy Editor (gpedit.msc).

For information about setting security policies, see Configure security policy settings.

The following table links to each security policy setting and provides the constant name for each. Setting descriptions contain reference information, best practices for configuring the policy setting, default values, differences between operating system versions, and considerations for policy management and security.

Related topics

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *