All

this issue comes from Default Policy. If you have changed default policy
or you have implemented 2003 Controller in your 2k AD. The way to check,
navigate to local policy on affected computer user rights assignment, you
will see that you your affective policy is the default policy that comes
from DOMAIN and you are not able to modify it. (LSDO) local, site, domain,
OU....

[Vincentk]

For all you people out there still having this problem (like I did recently), here's the fix!
Just put this in a BAT file:


@echo off
echo Privilege fix by Vincent Koeman (RKTOOLS.EXE needs to be installed)
echo See: http://www.google.com/search?q=RKTOOLS.EXE (First link)
pause
ntrights.exe -u "%USERNAME%" +r SeAssignPrimaryTokenPrivilege
ntrights.exe -u "%USERNAME%" +r SeAuditPrivilege
ntrights.exe -u "%USERNAME%" +r SeBackupPrivilege
ntrights.exe -u "%USERNAME%" +r SeBatchLogonRight
ntrights.exe -u "%USERNAME%" +r SeChangeNotifyPrivilege
ntrights.exe -u "%USERNAME%" +r SeCreateGlobalPrivilege
ntrights.exe -u "%USERNAME%" +r SeCreatePagefilePrivilege
ntrights.exe -u "%USERNAME%" +r SeCreatePermanentPrivilege
ntrights.exe -u "%USERNAME%" +r SeCreateTokenPrivilege
ntrights.exe -u "%USERNAME%" +r SeDebugPrivilege
ntrights.exe -u "%USERNAME%" +r SeEnableDelegationPrivilege
ntrights.exe -u "%USERNAME%" +r SeImpersonatePrivilege
ntrights.exe -u "%USERNAME%" +r SeIncreaseBasePriorityPrivilege
ntrights.exe -u "%USERNAME%" +r SeIncreaseQuotaPrivilege
ntrights.exe -u "%USERNAME%" +r SeInteractiveLogonRight
ntrights.exe -u "%USERNAME%" +r SeLoadDriverPrivilege
ntrights.exe -u "%USERNAME%" +r SeLockMemoryPrivilege
ntrights.exe -u "%USERNAME%" +r SeMachineAccountPrivilege
ntrights.exe -u "%USERNAME%" +r SeNetworkLogonRight
ntrights.exe -u "%USERNAME%" +r SeProfileSingleProcessPrivilege
ntrights.exe -u "%USERNAME%" +r SeRemoteShutdownPrivilege
ntrights.exe -u "%USERNAME%" +r SeRestorePrivilege
ntrights.exe -u "%USERNAME%" +r SeSecurityPrivilege
ntrights.exe -u "%USERNAME%" +r SeServiceLogonRight
ntrights.exe -u "%USERNAME%" +r SeShutdownPrivilege
ntrights.exe -u "%USERNAME%" +r SeSyncAgentPrivilege
ntrights.exe -u "%USERNAME%" +r SeSystemEnvironmentPrivilege
ntrights.exe -u "%USERNAME%" +r SeSystemProfilePrivilege
ntrights.exe -u "%USERNAME%" +r SeSystemtimePrivilege
ntrights.exe -u "%USERNAME%" +r SeTakeOwnershipPrivilege
ntrights.exe -u "%USERNAME%" +r SeTcbPrivilege
echo Privileges fixed!
pause


Good luck
-Vincentk