Windows Server 2003 Security: A Technical Reference

Rights, Privileges, and Permissions

As you read about Windows access controls, you may find that the words “rights,” “privileges,” and “permissions” are used interchangeably. Don't get confused. One author often uses the term “privilege” when another will use the word “rights.” Some discussions, especially those talking about Windows NT access controls, make the distinction that privileges are divided into Logon Rights and user privileges. The Windows 2000 and Windows Server 2003 interface, however, includes privileges and logon rights in the section of Local Policy called User Rights. Permissions are sometimes called “object permissions” and sometimes just “permissions.” The real distinction is that rights and privileges are something that you ...