How to automate security settings
I'm looking for a command line utility and associated syntax that will permit me to automate, via shell script, the setting of a user's 'User Rights Assignment'. I want to add the following to a new user account:
Log on as batch job, Log on as service, Deny logon locally, Manage auditing and security log
Any info in automating this setup would be greatly appreciated.
Software/Hardware used:
Software/Hardware used:
ASKED:
July 10, 2005 11:41 AM
UPDATED:
October 23, 2008 5:57 PM
RELATED QUESTIONS
- Administrator and user accounts on Windows Server 2008
- Active Directory LDAP, Set Custom Security Persmissions on 3 Attributes, not the whole class
- Is there a way to FTP a command to an AS/400 to copy user
- Audit Question - Force user signoff after inactivity
- Group policy filtering on both OU and Site?
Answer Wiki:
secedit.exe is builtin to Windows 2000/XP/2003. It will allow you to apply security templates designed either "by hand" or by using the "Security Templates" mmc snap-in also available builtin on the aforementioned versions of Windows. There are also a number of sample templates available for viewing using the snap-in. Once you've created the template you can apply it using secedit.exe, the "Security Analysis and Configuration" snap-in or by importing it into a Group Policy Object.
To see all answers submitted to the Answer Wiki: View Answer History.
The tool discussed in this tip from SearchEnterpriseDesktop.com provides some more information on how you can automate security updates.