deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update policy-csp-userrights.md

Browse Source
This commit is contained in:
Patti Short 2018-10-31 15:45:58 -07:00 committed by GitHub
parent 230f915025
commit 57a27cea98
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
windows/client-management/mdm/policy-csp-userrights.md
View File

@ -6,7 +6,7 @@ ms.topic: article
ms.prod: w10 ms.prod: w10
ms.technology: windows ms.technology: windows
author: MariciaAlforque author: MariciaAlforque
ms.date: 03/12/2018 ms.date: 10/31/2018
--- ---
# Policy CSP - UserRights # Policy CSP - UserRights
@ -14,7 +14,7 @@ ms.date: 03/12/2018
<hr/> <hr/>
User rights are assigned for user accounts or groups. The name of the policy defines the user right in question, and the values are always users or groups. Values can be represented as SIDs or strings. Here is a list for reference, [Well-Known SID Structures](https://msdn.microsoft.com/library/cc980032.aspx). Even though strings are supported for well-known accounts and groups, it is better to use SIDs because strings are localized for different languages. Some user rights allow things, like AccessFromNetwork, while others disallow things, like DenyAccessFromNetwork. User rights are assigned for user accounts or groups. The name of the policy defines the user right in question, and the values are always users or groups. Values can be represented as SIDs or strings. Here is a list for reference, [Well-Known SID Structures](https://msdn.microsoft.com/library/cc980032.aspx). Even though strings are supported for well-known accounts and groups, it is better to use SIDs because strings are localized for different languages. Some user rights allow things like AccessFromNetwork, while others disallow things, like DenyAccessFromNetwork.
Here is an example syncml for setting the user right BackupFilesAndDirectories for Administrators and Authenticated Users groups. Here is an example syncml for setting the user right BackupFilesAndDirectories for Administrators and Authenticated Users groups.
@ -32,7 +32,7 @@ Here is an example syncml for setting the user right BackupFilesAndDirectories f
<Target> <Target>
<LocURI>./Device/Vendor/MSFT/Policy/Config/UserRights/BackupFilesAndDirectories</LocURI> <LocURI>./Device/Vendor/MSFT/Policy/Config/UserRights/BackupFilesAndDirectories</LocURI>
</Target> </Target>
<Data>Authenticated Users&#xF000;Administrators</Data> <Data>Authenticated Users&#61440;Administrators</Data>
</Item> </Item>
</Replace> </Replace>
<Final/> <Final/>
@ -40,7 +40,7 @@ Here is an example syncml for setting the user right BackupFilesAndDirectories f
</SyncML> </SyncML>
``` ```
Here are examples of data fields. The encoded 0xF000 is the standard delimiter/separator Here are examples of data fields. Code \&#61440; which is encoded from \&#xF000, is the used for the delimiter/separator.
- Grant an user right to Administrators group via SID: - Grant an user right to Administrators group via SID:
``` ```
@ -49,17 +49,17 @@ Here are examples of data fields. The encoded 0xF000 is the standard delimiter/s
- Grant an user right to multiple groups (Administrators, Authenticated Users) via SID - Grant an user right to multiple groups (Administrators, Authenticated Users) via SID
``` ```
<Data>*S-1-5-32-544&#xF000;*S-1-5-11</Data> <Data>*S-1-5-32-544&#61440;*S-1-5-11</Data>
``` ```
- Grant an user right to multiple groups (Administrators, Authenticated Users) via a mix of SID and Strings - Grant an user right to multiple groups (Administrators, Authenticated Users) via a mix of SID and Strings
``` ```
<Data>*S-1-5-32-544&#xF000;Authenticated Users</Data> <Data>*S-1-5-32-544&#61440;Authenticated Users</Data>
``` ```
- Grant an user right to multiple groups (Authenticated Users, Administrators) via strings - Grant an user right to multiple groups (Authenticated Users, Administrators) via strings
``` ```
<Data>Authenticated Users&#xF000;Administrators</Data> <Data>Authenticated Users&#61440;Administrators</Data>
``` ```
- Empty input indicates that there are no users configured to have that user right - Empty input indicates that there are no users configured to have that user right