# Update user permissions in Windows NT and 2000

To update the rights in Windows NT:

1. On the Windows Start menu, select Programs->Administrative Tools.
2. Select User Manager.
3. Under the Policies menu, choose the User Rights option.
4. Check the Show Advanced Users Rights option.
5. Give the following rights to the Windows user running WebLogic Server:
   1. Act as part of the operating system.
   2. Create a token object.
   3. Replace a process level token.
6. Verify that the Windows user running WebLogic Server is a member of the Administrators group.
7. Reboot Windows NT to ensure all the modifications take effect.
8. Verify that the Logon as System Account option is checked. Note that the Allow System to Interact with Desktop option does not need to be checked. Running the Windows NT Security realm under a specific Windows NT user account does not work.

   To update the rights in Windows 2000:

9. On the Windows Start menu, select Programs->Administrative Tools.
10. Select Local Security Policy.
11. Go to Local Policies->User Rights Assignment.
12. Give the following rights to the Windows user running WebLogic Server:
    1. Act as part of the operating system
    2. Create a token object
    3. Replace a process level token
13. Verify that the Windows user running WebLogic Server is a member of the Administrators group.
14. Reboot Windows 2000 to ensure all the modifications take effect.
15. Verify that the Logon as System Account option is checked. Note that the Allow System to Interact with Desktop option does not need to be checked. Running the Windows NT Security realm under a specific Windows NT user account does not work.
    The following are common Windows NT error codes that occur when using the Windows NT Security realm:

    Error | Meaning
    --- | ---
    1326 | The host machine running the security realm does not have a trust relationship with the primary domain controller. The host machine may not be a member of the domain or the domain may not trust the host machine.
    53 | A network error has indicated that the path to the primary domain controller could not be located. This error can occur if the domain name is misspelled or if the domain name is specified rather than the host name of the primary domain controller.

    A full explanation of the Windows NT error codes is found in the `winerror.h` file.