PowerShell script to manage LSA rights.
Most parts of the script are copied from www.pinvoke.net ... I'm just the orchestrator who made it runnable as PowerShell...
Just run the script to register the functions...
Get-Rights user01 to get the assigned LSA rights for user01
Set-Right -User 'domain\user02' -Right 'SeServiceLogonRight' to assign LogonAsService right to user02
Remove-Right -Right 'SeServiceLogonRight' to remove LogonAsService right on the current user