How to grant "Act as part of the operating system" to a do..

This is a facetious question, but how to i grant the "Act as part of the
operating system" to a specific domain account?

i try, on our Windows 2000 domain controller:

1. Start
2. Programs
3. Administrative Tools
4. Active Directory Users and Computers
5. Expand "bunny.com", the name of our domain (Note: Not really our domain
name)
6. Select "Users"
7. In the right-hand-side select the user i want to grant the right to. The
account's name is "SQL Q. Server", and his login name is "SQLServer"
8. Right-click the account "SQLServer", select properties
9. There is no group-policy tab.

So, the question is: how do i grant the "Act as part of the operating
system" to a specific domain user?

Ian Boyd wrote:
> This is a facetious question, but how to i grant the "Act as part of the
> operating system" to a specific domain account?
>
> i try, on our Windows 2000 domain controller:
>
> 1. Start
> 2. Programs
> 3. Administrative Tools
> 4. Active Directory Users and Computers
> 5. Expand "bunny.com", the name of our domain (Note: Not really our domain
> name)
> 6. Select "Users"
> 7. In the right-hand-side select the user i want to grant the right to. The
> account's name is "SQL Q. Server", and his login name is "SQLServer"
> 8. Right-click the account "SQLServer", select properties
> 9. There is no group-policy tab.
>
> So, the question is: how do i grant the "Act as part of the operating
> system" to a specific domain user?

"Act as part of the operating system" is not a domain level thing,
IIRC. It is a machine specific right.

Click Start, Run.
Type gpedit.msc and click ok.
In the group policy editor:
Expand Windows Settings
Expand Security Settings
Expand Local Policies
Click on User Rights Assignment

"Act as part of the operating system" should be the second item in the
right pane. Double click it to add/remove accounts.