Re: Listing Local User Rights Assignment and Security Options

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

For example, if I open gpedit on a local machine, drill down to Computer
Configuration/Security Settings/Local Policies, right click "User Rights
Assignment", and Export List... to a file, I get something like this:

Policy Security Setting
Access this computer from the network Everyone,Authenticated
Users,Administrators,Pre-Windows 2000 Compatible Access,ENTERPRISE DOMAIN
CONTROLLERS
Act as part of the operating system
Add workstations to domain Authenticated Users
Adjust memory quotas for a process LOCAL SERVICE,NETWORK
SERVICE,Administrators
Allow log on locally Administrators,Account Operators,Server Operators,Print
Operators,Backup Operators
Allow log on through Terminal Services Administrators
Back up files and directories Administrators,Server Operators,Backup Operators
Bypass traverse checking Everyone,Authenticated
Users,Administrators,Pre-Windows 2000 Compatible Access
Change the system time LOCAL SERVICE,Administrators,Server Operators
Create a pagefile Administrators
Create a token object
Create global objects Administrators,SERVICE
Create permanent shared objects
Debug programs Administrators
Deny access to this computer from the network SUPPORT_388945a0
Deny log on as a batch job
Deny log on as a service
Deny log on locally SUPPORT_388945a0
Deny log on through Terminal Services
Enable computer and user accounts to be trusted for delegation Administrators
Force shutdown from a remote system Administrators,Server Operators
Generate security audits LOCAL SERVICE,NETWORK SERVICE
Impersonate a client after authentication Administrators,SERVICE
Increase scheduling priority Administrators
Load and unload device drivers Administrators,Print Operators
Lock pages in memory
Log on as a batch job LOCAL SERVICE,SUPPORT_388945a0
Log on as a service NETWORK SERVICE
Manage auditing and security log Exchange Enterprise Servers,Administrators
Modify firmware environment values Administrators
Perform volume maintenance tasks Administrators
Profile single process Administrators
Profile system performance Administrators
Remove computer from docking station Administrators
Replace a process level token LOCAL SERVICE,NETWORK SERVICE
Restore files and directories Administrators,Server Operators,Backup Operators
Shut down the system Administrators,Server Operators,Print Operators,Backup
Operators
Synchronize directory service data
Take ownership of files or other objects Administrators

I need to get this information for many servers.

Thanks,
Jeff



"Pegasus (MVP)" wrote:


"Jeff" <Jeff@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D85CABA9-45FB-4DAE-BE51-D0D5947B2980@xxxxxxxxxxxxxxxx
Hello,

I need to create a list of the local User Rights Assignment and local
Security Options settings for about 30 servers. Does anyone know of a way
to
easily do this? I want to avoid manually going to each server to export
these
settings. I was hoping to script this, but I can't find any WMI classes
that
would fit the bill.

Thanks,
Jeff

Could you elaborate what exactly you expect to see under
"User Rights Assigments" and "Security Options"?



.

Relevant Pages

  • Re: Group Policy in xp
    ... It looks as though you've probably got User Rights assigned to users ... >> Assignment parts of your policies and remove any 's that you see ... >> Windows Platform Support Team ... >>>>their systems this is working in windows 2000 clients but in windows ...
    (microsoft.public.win2000.group_policy)
  • Re: Why does not permit logon interactively?
    ... Computer configuration, windows settings, Security Settings, Local Policies, User Rights Assignment "Allow logon locally" ...
    (microsoft.public.windows.server.active_directory)
  • Re: WMI for Local Security Policy
    ... batch job Properties" located in "User Rights Assignment". ... Within Local Security Settings|Local Policies, select 'User Rights ...
    (microsoft.public.scripting.vbscript)