/DEFPRIVILEGES=([NO]privname[,...])

    Specifies default privileges for the user; that is, those enabled
    at login time. A NO prefix removes a privilege from the user. By
    specifying the keyword [NO]ALL with the /DEFPRIVILEGES qualifier,
    you can disable or enable all user privileges. The default
    privileges are TMPMBX and NETMBX. Privname is the name of the
    privilege.