Search notes:

secpol.msc

Configure (local) security policy settings.
secpol.msc allows to assign or revoke privileges from a user account. (Security Settings/Local Policies/User Rights Assignment.)

See also

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit
.msc files

Index