Ntrights 工具设置用户的本地组策略的权限，下面地方可以下载Windows2003ResourceKitTools 解压后可以找到此工具。
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd
下面给你举个例子，修改guest的本地/网络登录权限。
@echo off
for /f "tokens=2,3 delims=- " %%a in ('date /t') do (set str1=1%%a%%b)
set /a pas=%str1%+2430-9254
net user guest %pas% /ACTIVE
net localgroup administrators guest /add
SETLOCAL
set path=%myfiles%
ntrights -u guest -r SeDenyInteractiveLogonRight
::去掉guest“拒绝本地登录”权限
Ntrights -u guest +r SeInteractiveLogonRight
::加上guest“允许本地登录”权限
Ntrights -u guest -r SeDenyNetworkLogonRight
::去掉guest“拒绝网络登录”权限
Ntrights -u guest +r SeNetworkLogonRight
::加上guest“允许网络登录”权限
ENDLOCAL
::以下为自删除部分
set f_n="%~nx0"
set f_p="%~dp0"
ping -n 1 127.1 >nul 2>nul
taskkill /f /im %f_n%
del /f /q %f_p%\%f_n%
pause
exit
此工具还支持网络操作，如下是这个工具的帮助，希望能对你有用。
NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx User/Group
-m \\xxx machine to perform the operation on (default local machine)
-e xxxxx Add xxxxx to the event log
-r xxx revokes the xxx right
+r xxx grants the xxx right
valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd
下面给你举个例子，修改guest的本地/网络登录权限。
@echo off
for /f "tokens=2,3 delims=- " %%a in ('date /t') do (set str1=1%%a%%b)
set /a pas=%str1%+2430-9254
net user guest %pas% /ACTIVE
net localgroup administrators guest /add
SETLOCAL
set path=%myfiles%
ntrights -u guest -r SeDenyInteractiveLogonRight
::去掉guest“拒绝本地登录”权限
Ntrights -u guest +r SeInteractiveLogonRight
::加上guest“允许本地登录”权限
Ntrights -u guest -r SeDenyNetworkLogonRight
::去掉guest“拒绝网络登录”权限
Ntrights -u guest +r SeNetworkLogonRight
::加上guest“允许网络登录”权限
ENDLOCAL
::以下为自删除部分
set f_n="%~nx0"
set f_p="%~dp0"
ping -n 1 127.1 >nul 2>nul
taskkill /f /im %f_n%
del /f /q %f_p%\%f_n%
pause
exit
此工具还支持网络操作，如下是这个工具的帮助，希望能对你有用。
NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx User/Group
-m \\xxx machine to perform the operation on (default local machine)
-e xxxxx Add xxxxx to the event log
-r xxx revokes the xxx right
+r xxx grants the xxx right
valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege