Grant-Privilege
Grants an identity priveleges to perform system operations.
Syntax
Grant-Privilege [-Identity] <String> [-Privilege] <String[]> [<CommonParameters>]
Description
Privilege names are case-sensitive. The most current list of privileges can be found on Microsoft's website. Here is the most current list, as of November 2012:
- SeAuditPrivilege
- SeBackupPrivilege
- SeBatchLogonRight
- SeChangeNotifyPrivilege
- SeCreateGlobalPrivilege
- SeCreatePagefilePrivilege
- SeCreatePermanentPrivilege
- SeDebugPrivilege
- SeDenyBatchLogonRight
- SeDenyInteractiveLogonRight
- SeDenyNetworkLogonRight
- SeDenyRemoteInteractiveLogonRight
- SeDenyServiceLogonRight
- SeEnableDelegationPrivilege
- SeImpersonatePrivilege
- SeIncreaseBasePriorityPrivilege
- SeIncreaseQuotaPrivilege
- SeInteractiveLogonRight
- SeLoadDriverPrivilege
- SeLockMemoryPrivilege
- SeMachineAccountPrivilege
- SeManageVolumePrivilege
- SeNetworkLogonRight
- SeProfileSingleProcessPrivilege
- SeRestorePrivilege
- SeRemoteInteractiveLogonRight
- SeRemoteShutdownPrivilege
- SeReserveProcessorPrivilege
- SeSecurityPrivilege
- SeServiceLogonRight
- SeShutdownPrivilege
- SeSyncAgentPrivilege
- SeSystemEnvironmentPrivilege
- SeSystemProfilePrivilege
- SeSystemtimePrivilege
- SeTakeOwnershipPrivilege
- SeTcbPrivilege
- SeTrustedCredManAccessPrivilege
- SeUndockPrivilege
- SeUnsolicitedInputPrivilege
Related Commands
Parameters
Name |
Type |
Description |
Required? |
Pipeline Input |
Default Value |
Identity |
String |
The identity to grant a privilege.
|
true |
false |
|
Privilege |
String[] |
The privileges to grant. Privilege names are case-sensitive.
|
true |
false |
|
EXAMPLE 1
Grant-Privilege -Identity Batcomputer -Privilege SeServiceLogonRight
Grants the Batcomputer account the ability to logon as a service. Privilege names are case-sensitive.