Removes the identifiers from the process or system rights list.
    You cannot use the /DISABLE qualifier with the /ENABLE qualifier.
    Note that removing more than ten identifiers in a single command
    invocation requires CMKRNL privilege.