Each user rights assignment setting includes the following configuration options.


Domain Controllers

The settings to apply to Active Directory domain controllers.


Member Servers and Workstations

The settings to apply to Active Directory member servers and member workstations as well as stand-alone servers and workstations.


Account Names

The names of the accounts to match for the user rights assignment. 

  • The account names can include any of the defined variables.

  • When the match type is set to "Include Only" the account names can include the % wildcard at the start, end, or both the start and end of the string.

  • NOTE: When the match type is set to "Any" specifying account names has no effect.


Match Type

The match type for the user rights assignment.


  • When set to "Any" the user right may be assigned any account names, or no account names.

  • When set to "Exact Match" the user right must be assigned to the specified account names exactly.

  • When set to "Include Only" the user right may be assigned to any, or all, of the specified account names, but no account names that are not specified.

  • When set to "Must Include" the user right must be assigned to all of the specified account names, and optionally, additional account names.