Local Security Policy / NTRights / Script

  • Thread starter Thread starter A.J. Fried
  • Start date Start date
A

A.J. Fried

Does anyone know of any way to inspect a machine's local security policy
setting remotely and or programatically? Ideallym, this would be some sort
of WMI call.

Specifically, I know you can set a LSP with the NTRights.exe res kit
utility. BUT, this can't talk to a remote machine nor can it just dump the
current settings. Rather than set a LSP, I want to just look at it.

Even better would be some WMI way to get at a particular local security
policy like "log on locally" or "access this computer from the network",
etc.

TIA.
--> A.J. Fried
 
try Dumpsec (www.somarsoft.com). it is easy, free, and can be used remotely.
This will get almost everything from the local security policy list, just
not in the same format.
 
DumpSec ... what a good idea. BUT... It doesn't actually show all of
the rights and of course the ones I want are missing! Namely, deny
log on local and deny access to this computer from the network
(SeDenyInteractiveLogonRight and SeDenyNetworkLogonRight). Damn.

Alsom I really want to a way to script the dumping so I can automate.
DumpSec was a good idea though. Thanks.
 
A.J.-

have you attempted any WMI scripts? If you need help with the "syntax" or
the variables, go download scriptomatic from Microsoft.
 
I have not been able to find anyhting in WMI that will return the info
I want - specifically, the values of local security policies (like
"deny log on locally", etc.). If you can point me to the right place,
that would be excellent! Thanks. --> A.J. Fried
 
Try to look in scriptomatic from Microsoft. it will show you all of the
variables you can query with WMI (or at least a good percentage of the
overall list). Let me know if you find it in there.
 
I looked at scriptomatic. It doesnt have anything about local
security policies. Any other ideas?
 
Back
Top