I am trying to view the user privileges using the command prompt in Windows. User account & User privileges such as:
SeBatchLogonRight SeDenyBatchLogonRight SeInteractiveLogonRight SeDenyInteractiveLogonRight SeServiceLogonRight SeDenyServiceLogonRight SeNetworkLogonRight SeDenyNetworkLogonRight
I tried using ntrights
but it's not working. I can't use any tool as I am trying to create an automated script for an OS audit.
Open the Command Prompt by using the search bar and type: net user (account name). So the entry would look like this: net user fake123. If in the Local Group Memberships section, you only see Users, then you have a standard user account.
Type cmd, right-click the Command Prompt tile, and then click Run as administrator.
You can use the following commands:
whoami /priv whoami /all
For more information, check whoami @ technet.
Mark Russinovich wrote a terrific tool called AccessChk that lets you get this information from the command line. No installation is necessary.
http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx
For example:
accesschk.exe /accepteula -q -a SeServiceLogonRight
Returns this for me:
IIS APPPOOL\DefaultAppPool IIS APPPOOL\Classic .NET AppPool NT SERVICE\ALL SERVICES
By contrast, whoami /priv
and whoami /all
were missing some entries for me, like SeServiceLogonRight
.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With