Assign user rights to a group in Active Directory

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To assign user rights to a group in Active Directory

  1. Open Domain Controller Security Policy.

  2. In the console tree, click User Rights Assignment.


    • Security Settings/Local Policies/User Rights Assignment
  3. In the details pane, double-click the user right that you want to assign.

  4. Click Add User or Group.

    If the button appears dimmed, select the Define these policy settings check box.

  5. Type the name of the group to which you want to assign this right.


  • To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.

  • To open Domain Controller Security Policy, click Start, click Control Panel, double-click Administrative Tools, and then double-click Domain Controller Security Policy.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also


Group types
Default groups
User Rights Assignment