Re: Local Group Policy

Ato Bisda wrote:

Hello,

I use an external program called DUMPACL (www.somarsoft.com) for this purpose.

DUMPACL can be invoked from a command line to generate a CSV file of user rights.
The syntax looks something like the following:

    dumpacl /rpt=rights /saveas=csv /outfile=rights.csv /computer=hostname

You can run dumpacl from either a RUN or EXEC shell in VBScript and then parse the
resulting CSV file. The "Log On Locally" privilege will show up as "SeInteractiveLogonRight". 


Cool! I wasn't aware that DumpSec (formerly known as DumpAcl) could
obtain the user rights assignments :-)


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx
.

Relevant Pages

  • Re: Enumerating LSA
    ... logon as a batch job ... I use an external program called DUMPACL for this ... then parse the resulting CSV file. ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.wmi)
  • Re: WMI privilege enumeration
    ... If you mean user privileges like "Log On Locally" etc., ... I use an external program called DUMPACL for this ... then parse the resulting CSV file. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Re: Local Group Policy
    ... DUMPACL can be invoked from a command line to generate a CSV file of user rights. ... You can run dumpacl from either a RUN or EXEC shell in VBScript and then parse the ...
    (microsoft.public.windows.server.scripting)
  • Re: WMI privilege enumeration
    ... > I think they only way to enumerate local settings is to use the native C ... Subject: Local Group Policy ... I use an external program called DUMPACL for this ... -- torgeir, Microsoft MVP Scripting, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Re: share folder permission
    ... DumpSec (formerly known as DumpAcl) ... has command line interface as well ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)