Virindi

I mean, the user should have no network / remote access rights. In other words, after I add the account, it should only be useable locally.

I will definately give this a shot. Thanks very much for the help.

Hi all, I posted this in the Windows XP forum, and then noticed that there was a security forum here. I apologize for the cross-post in advance. I'm working on a windows installer that adds a new user to the system to run scheduled tasks. For security, I want to disable remote login for that account. There's a utility for windows that can do this (ntrights.exe), but it's only part of the Resource Kit and not installed by default. I can't depend on the kit being installed - I have to assume the end user won't have it. I also can't re-distribute ntrights.exe as part of my installer - we don't want to make Microsoft angry So far I am thinking maybe there is a solution that falls into one of the following: 1) is it possible to disable remote login through registry editing somehow? 2) can I export the "disable remote login" part of a security policy and re-apply just that one rule during installs using gpedit or whatever? Not sure that this is possible, or that it would work on XP Home/Pro and 2000, but maybe.. 3) is there an open-source tool or something else I can use to do this? 4) Maybe there is another utility that is installed with windows that will do this, and I missed it somehow. Any help would be greatly appreciated. Thanks!

Hi all, I'm working on a windows installer that adds a new user to the system to run scheduled tasks. I generate a random password, add the user, and schedule the tasks. Here's the thing I can't figure out so far: For security, I want to disable remote login for that account. I think there's a utility for windows that can do this, in the Resource Kit. But I can't depend on the kit being installed - I have to assume the end user won't have it. I also can't re-distribute the program(s) that comes as part of the Resource Kit, as part of my installer - we don't want to make Microsoft angry Anyway, I see two programs that come as part of the Resource Kit that would do the job: Ifmember.exe - Manage user group association Ntrights.exe - Manage user rights I am trying to figure out if anyone knows a way (through registry manipulations, another open-source alternative that I could include in my installer, or anything really) to disable remote login rights for my new user. I would prefer something that works on Win9x as well as 2000/XP, but anything would help... even if the solution only worked on 2000 and up (I can warn the user that I can't disable remote login for their OS because it's too old or something). Any help would be greatly appreciated.

Thanks very much for the reply. You've made my life much easier!

Hi all, I don't have a copy of Windows XP Home Edition to test this - but with XP Pro, you can schedule tasks from the commandline using: Windows\System32\schtasks.exe Can anyone that has Home Edition confirm that this file exists on XP Home and Win2000 as well? I would very much appreciate it. I am almost certain that Win2000 also has schtasks.exe, but not so sure about XP Home. Title Edited - Please follow new posting rules from now on. --Zxian

Nicely done. Thank you.

http://support.microsoft.com/default.aspx?...kb;en-us;330132 Fix the Desktop.ini issue: Run this from XPlode, cmdlines, or whatever: attrib -h -s desktop.ini /s Followed by: attrib +h +s desktop.ini /s Doing that will fix the issue. I don't know what exactly causes it, probably one of the tweaks out there like Marshall's Visualiation Tweaks with superhidden or hidden seeting, I dont know - but whatever. This fixes it. Hope it helps.