I can get the logged in user's privileges in powershell like so:

whoami /priv

How do I do this for a user I'm not logged in as?

  • Do you want this for someone who is currently logged in, or for just any user in general?
    – squillman
    Jan 17 '12 at 19:45
  • Any user. I'd like to do something like: whoisuser someuser /priv. If you get my drift.
    – O.O
    Jan 17 '12 at 19:46

This might answer for your question.


Via AccessChk, you should be able to view all users and their associated rights on that 2008 Server. (Sysinternals)

  • 1
    I'd rather the tool already be installed with the operating system.
    – O.O
    Jan 17 '12 at 19:20
  • 8
    ...which is often not possible under Windows; the recommended toolkits are often not so much recommended as much as mandatory (or WHY THE @#%!! DIDN'T THEY INCLUDE THEM?!) Jan 17 '12 at 19:23
  • @subt13 What Bart said. Alternatively wait 3-5 years and MS may include those toolkits with the OS (and you'll be able to download newer, better ones).
    – voretaq7
    Jan 17 '12 at 20:26

SECEDIT /export /areas USER_RIGHTS /cfg foo.txt exports the list of user privileges and the users associated with each of the privileges.

Since this returns the set of user privileges associated with all the users associated with the system where the command gets executed you will have the information for any user associated with the system whether or not he/she is logged in.

The /areas is for you to specify the information that you are interested in that needs to be exported. (to the file specified following /cfg).



I'm going to put this here as an answer for another way of doing it, even though I haven't learned enough about this tool to really understand the output ):

secedit /export /areas USER_RIGHTS /cfg foo.txt

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.