Remove-Privilege

NAME Remove-Privilege



SYNOPSIS

Removes a specified privilege for a user or group





SYNTAX

Remove-Privilege [-AccountName] <String> [-Privilege] {SeAssignPrimaryTokenPrivilege | SeAuditPrivilege |

SeBackupPrivilege | SeBatchLogonRight | SeChangeNotifyPrivilege | SeCreateGlobalPrivilege |

SeCreatePagefilePrivilege | SeCreatePermanentPrivilege | SeCreateSymbolicLinkPrivilege | SeCreateTokenPrivilege |

SeDebugPrivilege | SeImpersonatePrivilege | SeIncreaseBasePriorityPrivilege | SeIncreaseQuotaPrivilege |

SeInteractiveLogonRight | SeLoadDriverPrivilege | SeLockMemoryPrivilege | SeMachineAccountPrivilege |

SeManageVolumePrivilege | SeNetworkLogonRight | SeProfileSingleProcessPrivilege | SeRemoteInteractiveLogonRight |

SeRemoteShutdownPrivilege | SeRestorePrivilege | SeSecurityPrivilege | SeServiceLogonRight | SeShutdownPrivilege |

SeSystemEnvironmentPrivilege | SeSystemProfilePrivilege | SeSystemtimePrivilege | SeTakeOwnershipPrivilege |

SeTcbPrivilege | SeTimeZonePrivilege | SeUndockPrivilege | SeDenyNetworkLogonRight | SeDenyBatchLogonRight |

SeDenyServiceLogonRight | SeDenyInteractiveLogonRight | SeSyncAgentPrivilege | SeEnableDelegationPrivilege |

SeDenyRemoteInteractiveLogonRight | SeTrustedCredManAccessPrivilege | SeIncreaseWorkingSetPrivilege} [-WhatIf]

[-Confirm] [<CommonParameters>]





DESCRIPTION

Removes a specified privilege for a user or group. This will remain until

re-added using Add-Privilege or a policy is refreshed.





PARAMETERS

-AccountName <String>

The user or group which will have the privilege removed.



Required? true

Position? 1

Default value

Accept pipeline input? false

Accept wildcard characters? false



-Privilege

Specific privilege/s to remove from the local machine



Required? true

Position? 2

Default value

Accept pipeline input? false

Accept wildcard characters? false



-WhatIf [<SwitchParameter>]



Required? false

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



-Confirm [<SwitchParameter>]



Required? false

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS



OUTPUTS



NOTES





Name: Remove-Privilege

Author: Boe Prox

Version History:

1.0 - Initial Version



-------------------------- EXAMPLE 1 --------------------------



PS C:\\>Remove-Privilege -AccountName Domain\\SomeUser -Privilege SeBackupPrivilege



Description

-----------

Removes the SeBackupPrivilege privilege for Domain\\SomeUser on the local machine











RELATED LINKS