Assigning Privileges to an Account

You can assign privileges to accounts either by using the Local Security Policy Microsoft Management Console (MMC) snap-in (Secpol.msc) or by calling the LsaAddAccountRights function.

Assigning a privilege to an account does not affect existing user tokens. A user must log off and then log back on to get an access token with the newly assigned privilege.

To assign privileges by using the Local Security Policy MMC snap-in, edit the list of users for each privilege listed under Security Settings/Local Policies/User Rights Assignment.