User rights that are assigned in this logon. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment.
Original |
Mapped |
Description |
---|---|---|
SeTrustedCredManAccessPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_TRUSTED_CRED_MAN_ACCESS_PRIVILEGE |
Access Credential Manager as a trusted caller. |
SeNetworkLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_NETWORK_LOGON_RIGHT |
Access this computer from the network. |
SeTcbPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_TCB_PRIVILEGE |
Act as part of the operating system. |
SeMachineAccountPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_MACHINE_ACCOUNT_PRIVILEGE |
Add workstations to domain. |
SeIncreaseQuotaPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_INCREASE_QUOTA_PRIVILEGE |
Adjust memory quotas for a process. |
SeInteractiveLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_INTERACTIVE_LOGON_RIGHT |
Allow log on locally. |
SeRemoteInteractiveLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_REMOTE_INTERACTIVE_LOGON_RIGHT |
Allow log on through Remote Desktop Services. |
SeBackupPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_BACKUP_PRIVILEGE |
Back up files and directories. |
SeChangeNotifyPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CHANGE_NOTIFY_PRIVILEGE |
Bypass traverse checking. |
SeSystemtimePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SYSTEMTIME_PRIVILEGE |
Change the system time. |
SeTimeZonePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_TIME_ZONE_PRIVILEGE |
Change the time zone. |
SeCreatePagefilePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CREATE_PAGEFILE_PRIVILEGE |
Create a pagefile. |
SeCreateTokenPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CREATE_TOKEN_PRIVILEGE |
Create a token object. |
SeCreateGlobalPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CREATE_GLOBAL_PRIVILEGE |
Create global objects. |
SeCreatePermanentPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CREATE_PERMANENT_PRIVILEGE |
Create permanent shared objects. |
SeCreateSymbolicLinkPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_CREATE_SYMBOLIC_LINK_PRIVILEGE |
Create symbolic links. |
SeDebugPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DEBUG_PRIVILEGE |
Debug programs. |
SeDenyNetworkLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DENY_NETWORK_LOGON_RIGHT |
Deny access to this computer from the network. |
SeDenyBatchLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DENY_BATCH_LOGON_RIGHT |
Deny log on as a batch job. |
SeDenyServiceLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DENY_SERVICE_LOGON_RIGHT |
Deny log on as a service. |
SeDenyInteractiveLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DENY_INTERACTIVE_LOGON_RIGHT |
Deny log on locally. |
SeDenyRemoteInteractiveLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DENY_REMOTE_INTERACTIVE_LOGON_RIGHT |
Deny log on through Remote Desktop Services. |
SeEnableDelegationPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_ENABLE_DELEGATION_PRIVILEGE |
Enable computer and user accounts to be trusted for delegation. |
SeRemoteShutdownPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_REMOTE_SHUTDOWN_PRIVILEGE |
Force shutdown from a remote system. |
SeAuditPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_AUDIT_PRIVILEGE |
Generate security audits. |
SeImpersonatePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_IMPERSONATE_PRIVILEGE |
Impersonate a client after authentication. |
SeIncreaseWorkingSetPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_INCREASE_WORKING_SET_PRIVILEGE |
Increase a process working set. |
SeIncreaseBasePriorityPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_INCREASE_BASE_PRIORITY_PRIVILEGE |
Increase scheduling priority. |
SeLoadDriverPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_LOAD_DRIVER_PRIVILEGE |
Load and unload device drivers. |
SeLockMemoryPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_LOCK_MEMORY_PRIVILEGE |
Lock pages in memory. |
SeBatchLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_BATCH_LOGON_RIGHT |
Log on as a batch job. |
SeServiceLogonRight |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SERVICE_LOGON_RIGHT |
Log on as a service. |
SeSecurityPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SECURITY_PRIVILEGE |
Manage auditing and security log. |
SeRelabelPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_RELABEL_PRIVILEGE |
Modify an object label. |
SeSystemEnvironmentPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SYSTEM_ENVIRONMENT_PRIVILEGE |
Modify firmware environment values. |
SeDelegateSessionUserImpersonatePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_DELEGATE_SESSION_USER_IMPERSONATE_PRIVILEGE |
Obtain an impersonation token for another user in the same session. |
SeManageVolumePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_MANAGE_VOLUME_PRIVILEGE |
Perform volume maintenance tasks. |
SeProfileSingleProcessPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_PROFILE_SINGLE_PROCESS_PRIVILEGE |
Profile single process. |
SeSystemProfilePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SYSTEM_PROFILE_PRIVILEGE |
Profile system performance. |
SeUndockPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_UNDOCK_PRIVILEGE |
Remove computer from docking station. |
SeAssignPrimaryTokenPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_ASSIGN_PRIMARY_TOKEN_PRIVILEGE |
Replace a process level token. |
SeRestorePrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_RESTORE_PRIVILEGE |
Restore files and directories. |
SeShutdownPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SHUTDOWN_PRIVILEGE |
Shut down the system |
SeSyncAgentPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_SYNC_AGENT_PRIVILEGE |
Synchronize directory service data. |
SeTakeOwnershipPrivilege |
XDM_CONST.LOGON_ASSIGNED_RIGHT_SE_TAKE_OWNERSHIP_PRIVILEGE |
Take ownership of files or other objects. |