You can administer a network server through the command prompt just as though you were using the GUI. Obviously performing administrative tasks is a lot easier using the GUI, so you may never have to use the command prompt to grant a user certain privileges. But becoming familiar with some of the commands available may rescue you from a difficult situation just when you least expect it.
With the Ntrights.exe command (available from the Windows 2000 resource kit) an administrator can, for example, grant a user (with appropriate approval of course) the right to manage the auditing and security log.
Issuing the following command can do this:
Ntrights +r SeSecurityPrivilege -u "Username" -m\\servername
+r granting user right privilege
-u username that will be that will be managing the auditing and security logs.
-m indicates that the changes will be performed on a remote server.
For a detailed listing of all the privileges available visit the Microsoft Web Site and enter 279664 (which is the Knowledgebase article) in the Search Field.
Adesh Rampat has 10 years experience with network and IT administration. He is a member of the Association Of Internet Professionals, the Institute For Network Professionals, and the International Webmasters Association. He has also lectured extensively on a variety of topics.
This was first published in February 2003