What are privileges and permissions ?
Many people get confused between ‘privileges’ and ‘permissions’ in Windows NT/2000/XP. In NT/2000/XP, a ‘privilege’ or ‘right’ is something you are allowed to do by virtue of who you are. Privileges have names like ‘Load and Unload Device Drivers’. Privileges are assigned to particular user ids or to user groups. Assigning privileges to role-based groups is often more convenient, so (for example) the Load Drivers privilege is assigned to the Administrators group, which means that any member of Administrators can load drivers. Privileges are assigned by the User Rights Assignment thingy in the Local Security Settings console, secpol.msc. Privileges are independent of any particular object. You can ‘Load (any) Drivers’, not ‘Load (specific) Driver FOO.SYS’. In NT/2000/XP, ‘permissions’ are settings applied to system objects (such as files, directories, registry keys) that say who is allowed to do what to this object. Permissions are specified in the access control list (part of the secur