Re: Enumerating LSA

ignacio wrote:

Hi,

I'm trying to find a way to enumerate the users with the following
rights in the local pc:

logon as a service
logon as a batch job
act as part of the operating system

Using Win32_Services have provided no results so far.  Any
clue on this?

Hi,

You cannot obtain this information with WMI.

The free DumpSec utility (formerly known as DumpAcl) is an option:


From: "Ato Bisda" <atobi...@xxxxxxxxx>
Subject: Re: Local Group Policy
Date: Mon, 20 Jun 2005 08:36:57 -0400
Message-ID: <us#JETZdFHA.3492@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.scripting

<quote>
Hello,

I use an external program called DUMPACL (www.somarsoft.com) for this
purpose.

DUMPACL can be invoked from a command line to generate a CSV file of
user rights.

The syntax looks something like the following:

  dumpacl /rpt=rights /saveas=csv /outfile=rights.csv /computer=hostname

You can run dumpacl from either a RUN or EXEC shell in VBScript and
then parse the resulting CSV file. The "Log On Locally" privilege will
show up as "SeInteractiveLogonRight".

HTH,
Ato

</quote>



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx
.

Relevant Pages

  • Re: Local Group Policy
    ... DUMPACL can be invoked from a command line to generate a CSV file of user rights. ... You can run dumpacl from either a RUN or EXEC shell in VBScript and then parse the ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windows.server.scripting)
  • Re: WMI privilege enumeration
    ... If you mean user privileges like "Log On Locally" etc., ... I use an external program called DUMPACL for this ... then parse the resulting CSV file. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Re: How to execute the logon script when the network cable is connecte
    ... > logon locally. ... > runs (and also that the group policy get updated). ... Note that the CachedLogonsCount is a number indicating for how many ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)
  • Re: How to execute the logon script when the network cable is connecte
    ... > logon locally. ... > runs (and also that the group policy get updated). ... Note that the CachedLogonsCount is a number indicating for how many ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.general)
  • Re: Drive mappings fail on AutoLogon
    ... Description of the Windows XP Professional Fast Logon ... See the Group Policy setting ... Scripts May Not Run Before Windows Explorer Starts Even Though ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)