Before you start
Objectives: learn how can you configure user rights trough Group Policy editor.
Prerequisites: you should know what is Group Policy.
Key terms: policy, user, group, rights, assignment, editor, security
User Rights Assignment
We can open GP editor through Run menu by typing in gpedit.msc and clicking on the OK button. This opens Group Policy editor for local computer. Next, we have to navigate to the Computer Configuration, Windows Settings, Security Settings, Local Policies, and then User Rights Assignment.
Image 183.1 – User Rights Assignment Section
Let’s find and open the ‘Change the system time’ policy. Notice that Administrators and Power Users can currently change time on the system.
Image 183.2 – Change the system time Policy
Let’s remove the Power Users from this list, so that only administrators can change the system time. Let’s add Power Users the right to Debug programs. We will open ‘Debug programs’ policy, click ‘Add User or Group…’ button, and look for the Power Users group. Before we can reach groups, we have to select Groups option in the Object Types section.
Image 183.3 – Object Types
When we are finished, we can click on the OK button to exit this policy. Power Users will now be able to debug programs.
As you can see, we have a lot of options for setting up user rights. Remember that we can do this for any user or group that we create.