Thursday, March 09, 2006

NTRights's valid attributes

NtRights.exe has a help page that lists the valid attributes:

valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege

But it also accepts any new Privilege Constants introduced after it was built. I am not sure when it is built exactly but this NtRights.exe that I use is in Windows 2000 Resource Kit.

One of the new constants is:
SE_CREATE_GLOBAL_NAME -- SeCreateGlobalPrivilege