Windows 7 equivalent for ntrights.exe

You can still use ntrights from the Windows Server 2003 Resource Kit Tools. Although not supported naturally, many of the tools performs flawlessly (including ntrights.exe).

Proof: Microsoft TechNet (scroll down until you find the Tool table, including NTRights.exe as one of the tools that can be used).

If you want to do it in Powershell you can install Powershell Community Extensions (PSCX) and use their Get-Privilege and Set-Privilege cmdlets.

Example from PSCX Help:

$p = Get-Privilege
$p.Enable('SeTimeZonePrivilege')
Set-Privilege $p
Get-Privilege | ft Name, Status -a

Name Status
---- ------
SeShutdownPrivilege Disabled
SeChangeNotifyPrivilege EnabledByDefault, Enabled
SeUndockPrivilege Disabled
SeIncreaseWorkingSetPrivilege Disabled
SeTimeZonePrivilege Enabled

By default it acts on the current user, but you can pass it a specific windows identity, of course.

Although its not suitable for scripting, The user management plugin for the orthodox file manager Far Manager will let you do this from the console. If you are running the 64 bit version of farmanager, you will need the 64 bit version of the plugin from the evil programmers google code project.