COMMAND

    kernel

SYSTEMS AFFECTED

    WinNT

PROBLEM

    David Gayler posted following.  There is a bug in the MS API.   He
    has confirmed  it.   If there  are no  other logon  rights (System
    Access  rights),  then  it  will  also  delete the last right (i.e
    Access from  Network).   You need  to make  undocumented calls  to
    make it work and unfortunately  David cannot give them out.   User
    Mangler uses these undocumented calls.

    This was observed first time in following situation.  Whenever you
    remove  the  Users  local  group  from  the  system shutdown right
    (SeShutdownPrivilege), it will also remove Users from Access  this
    computer from network (SeNetworkLogonRight) and from Logon Locally
    (SeInteractiveLogonRight).  To  reproduce the problem,  make sure,
    using User Manager, that the local group Users is assigned to  the
    rights mentioned above.  Next issue the following command with the
    RK utility NTRights: ntrights -r SeShutdownPrivilege -u Users.  If
    you go  back to  User Manager,  you will  see that  the localgroup
    Users is missing from all three rights.  Now, if you try to do the
    same thing using User Manager, no such problem arise.

SOLUTION

    Nothing yet officially.