Reading user rights using VBscript

Question

I am trying to determine if a user (the one that runs the script, with or without running as) has specific user rights policies. Since secedit / analysis refers only to the actual setup and ignores the distribution of privileges to the group member, in this case it is useless.

I mean these privileges: SeTcbPrivilege SeIncreaseQuotaPrivilege

Answer 1

I don’t know about SeTcbPrivilege, but look at this article to determine if the user has the SeIncreaseQuotaPrivilege privilege. It basically talks about how you can use Showpriv.exe from the Windows 2000 Server resource set

Answer 2

As an alternative to the scenario, you can get a report on user rights, as well as many other security reports using Quest reporter .

We use this tool in our company to ensure the safety of privacy reports and user discovery.