Windows distinguishes two types of access privileges: permissions and rights . A permission is the ability to access a particular object in some defined manner—for example, to write to an NTFS file or to modify a printer queue. A right is the ability to perform a particular sys-temwide action, such as logging on or resetting the clock .
The owner of a resource (or an administrator) assigns permissions to the resource via its properties dialog box. For example, if you are the printer owner or have administrative privileges, you can restrict someone from using a particular printer by visiting the properties dialog box for that printer. Administrators set rights via the Local Security Policy console. (This console is available only in the Professional, Enterprise, and Ultimate editions of Windows 7. In the other editions, rights for various security groups are predefined and unchangeable.) For example, an administrator could grant someone the right to install a device driver.
Was this article helpful?