Ntrights command line (DOS) Modification of User Permissions

This tool is an official Microsoft tool, but it is not provided by the system and must be downloaded.
Microsoft officially downloads the "Windows Server 2003 Resource Kit Tools" Installation Package
After installation, copy ntrights from % ProgramFiles % \ Windows resource kits \ tools to the System
Download this site: nright.rar

Usage: (the parameter description is LZ-myst original, except for the logon permission Section)CopyCodeThe Code is as follows:-u xxx is a user/group.
-M \ XXX: Operate the remote host (default local machine)
-E xxxxx: Add XXXXX to Event Log
-R xxx: delete XXX permission
+ Add XXX permission to r xxx

The user permissions that can be set are as follows: (corresponding: Group Policy-Computer Configuration-Windows Settings-Security Settings-User Rights Assignment)

User permission description
Secreatetokenprivilege
Seassignprimarytokenprivilege Replace Process-level mark
SeLockMemoryPrivilege Memory Lock page
Seincreasequot1_vilege adjust the memory quota of the process
Seunsolicitedinputprivilege does not require the self-input permission (I do not know which permission corresponds to the user's permission assignment)
Add workstation in the semachineaccountprivilege domain
Setcbprivilege
Sesecurityprivilege management audit and security logs
Setakeownershipprivilege obtains the ownership of a file or other objects.
Seloaddriverprivilege Program
Sesystemprofileprivilege: configure system performance
Sesystemtimeprivilege: Change System Time
SeProfileSingleProcessPrivilege
Seincreasebasepriorityprivilege increases the progress Priority.
Secreatepagefileprivilege
Secreatepermanentprivilege
SeBackupPrivilege backup file and directory
Serestoreprivilege Restore files and directories
Seshutdownprivilege shut down the system
Seauditprivilege generates security audit
Sesystemenvironmentprivilege
Sechangenotifyprivilege skips the traversal check
SeRemoteShutdownPrivilege Force Shutdown From Remote System
SeNetworkLogonRight accesses this computer from the network
SeInteractiveLogonRight local Login
SeBatchLogonRight
SeServiceLogonRight
Sedenynetworklogonright: denies access to this computer from the network
Sedenyinteractivelogonright: refuse to log on locally
Sedenybatchlogonright: refuse to Log On As A Batch Processing job
SeDenyServiceLogonRight: refuse to log on as a service

Example:
Delete the Guest user from "Deny access to this computer from the network"
Ntrights-u guest-r sedenynetworklogonright