RE: local security policy via wmi

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi,

>can i set this stuff remotely via wmi,

Would you please tell me which specific policy you want to change?

>or more generally - is there a way to set this stuff
>remotely (not using GP)


>or more generally - is there a way to set this stuff remotely (not using
GP)

You can try to use the Windows 2000/2003 Resource Kit utility Ntrights.exe
or the corresponding Local Security Authority (LSA) API calls to grant the
target user right by program, please refer to the following MSDN articles
for details:

How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?kbid=279664

How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?kbid=245207

How to Manage User Privileges Programmatically in Windows NT
http://support.microsoft.com/default.aspx?scid=kb;EN-US;132958


Thanks!

Best regards,

Gary Chang
Microsoft Community Support
--------------------
Get Secure! ¡§C www.microsoft.com/security
Register to Access MSDN Managed Newsgroups!
http://support.microsoft.com/default.aspx?scid=/servicedesks/msdn/nospam.asp
&SD=msdn

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Multiple log-ins on w2k/2003 server domain - newbie question
    ... There is no such Resource Kit Utility available on windows server 2003 uptil ... > a Windows domain from an unlimited number of workstations, ...
    (microsoft.public.windows.server.general)
  • Re: Audit Logs Save Slowly and/or corrupt
    ... If you're running Windows 2000, then use the Resource Kit utility DUMPEL.EXE ... instead of saving to CSV. ... and the .csv file available to us? ...
    (microsoft.public.win2000.security)
  • Determining which machines Ive logged on to
    ... We're running a Windows 2000 Active Directory environment. ... machines I've currently 'locked' instead of 'logged off'. ...
    (microsoft.public.win2000.active_directory)
  • Determining which machines Ive logged on to
    ... We're running a Windows 2000 Active Directory environment. ... machines I've currently 'locked' instead of 'logged off'. ...
    (microsoft.public.win2000.general)
  • Re: Recover from log on locally domain setting
    ... Secedit.sdb file has to be copied from an operational Windows 2000 ... If the computer has Microsoft Windows 2000 Server installed, ... 279664 How to Set Logon User Rights with the Ntrights.exe Utility ...
    (microsoft.public.win2000.security)