Windows Server® 2008 Administrator's Pocket Consultant

Account Capabilities

When you set up a user account, you can grant the user specific capabilities. You generally assign these capabilities by making the user a member of one or more groups, thus giving the user the capabilities of these groups. You withdraw capabilities by removing group membership.

In Windows Server 2008, you can assign the following types of capabilities to an account:

• Privileges. A type of user right that grants permissions to perform specific administrative tasks. You can assign privileges to both user and group accounts. An example of a privilege is the ability to shut down the system.

• Logon rights. A type of user right that grants logon permissions. You can assign logon rights to both user and group accounts. An example of ...