NTRights will adjust privilege lists even when set by Group Policy

Group Policy Objects can define privilege lists in the User Rights Assignment section. When configured with Group Policy, these lists cannot be changed with the Local Security Policy snap-in on the client machine. I noticed, however, that the NTRights utility (from the Windows Server 2003 Resource Kit) is perfectly happy to adjust the privilege lists anyway. The change is reflected in the Local Security Policy editor, which still won't allow editing the list. More importantly, the change actually takes effect (at the next logon of affected users, like usual). The caveat is that the domain's policy will be reapplied if the client is rebooted or if the responsible GPO is edited.