`wbox` user groups

[quantum5]

Allow wbox's users be added to a group so the admin can enforce security policies on them if so desired.

[quantum5]

@Xyene doesn't like the fact his porn collection programs in Program Files are capable of being read by the judge. Well then, we might have to add a wbox group and tell him to specifically deny that user access.

[quantum5]

NTRights.exe is a resource kit tool that we can harness to deny SeDenyInteractiveLogonRight to the proposed wbox group, which is optional, but could allow banning access to directories and denying logon.

We can also create a tool to remove wbox account, and may be run it before the judge starts, or on system boot.

NTRights example: NTRights.exe -u username +r SeDenyInteractiveLogonRight