Logon Type — Interactive Used to log on at the local console. Logon Type Number 2 Logon User Rights / Tokens SeInteractiveLogonRight — Allow log on locally SeDenyInteractiveLogonRight — Deny…

SeTakeOwnershipPrivilege — Take ownership of files or other objects Determines which users can take ownership of any securable object in the device, including Active Directory objects, NTFS files and folders,…

SeRestorePrivilege — Restore files and directories Determines which users can bypass file, directory, registry, and other persistent object permissions when they restore backed up files and directories, and it determines…

SeAssignPrimaryTokenPrivilege — Replace a process level token Determines which parent processes can replace the access token that is associated with a child process. Specifically, the “Replace a process level token”…

SeLoadDriverPrivilege — Load and unload device drivers Determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new…

SeImpersonatePrivilege — Impersonate a client after authentication Determines which programs are allowed to impersonate a user or another specified account and act on behalf of the user. If this user…

SeDebugPrivilege — Debug programs Determines which users can attach to or open any process, even a process they do not own. Developers who are debugging their own applications do not…

SeCreateTokenPrivilege — Create a token object Determines which accounts a process can use to create a token, and which accounts it can then use to gain access to local resources…

SeBackupPrivilege — Back up files and directories Determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system. This…