I am currently working on a project to make a script to get any computer CIS compliant up to IG3 level. Part of this includes changing the User Rights Assignments to only Admins or remote desktop users.

I would ideally like to run this without anything like NTRights.exe and primarily from PowerShell to fit in with the other parts of my script. Any help as to how to remove unwanted Users that already have the right and how to add Users that need the right would be greatly appreciated. 🙂