dslider

I fixed this issue.. I had a typo in the inf file that was keeping it from setting the permissions

How can I set DCOM: Machine access restrictions in security descriptor definition language and DCOM: Machine launch restrictions in security descriptor definition language? This is for a script I am writing. I am compiling the Group policy settings into an inf file. Which I am calling in the script (from a bat file): %sys32%\secedit.exe /configure /db %POST_SYSPREP%\XPClient.sdb /cfg %POST_SYSPREP%\security_services.inf /log %systemroot%\security_services.log /quiet How can I set these setting within my inf file?

yes they have 4 video cards in them that are all identical

I have a image I want to be able to put on a few different machines. They are all the same just different physical boxes... I am having an issue with the video drivers not loading on another box after I sysprep the image and push it up to our storage. The video loads fine on the box the image was created on but if I bring it down on a different machine it wont load the video drivers. I can boot into safe mode and install the drivers and then reboot into normal mode and it works fine but I dont want to have to do this since the image will be sent out to more then one location and I will not be installing all of them. The video drivers are the only ones that dont load. Any suggestions?

Maybe I wasnt clear... I know about runonce... but what I need to do is have a script that runs the very first time a user logs into the machine.... so if I create a new user and then go to log into that users account it needs to run the script one time.. so fr every new user it needs to run the script..... is there a way to do that?

Is there a way to run a script the very first time a user logs into a computer? What I need to do is run a security script on the users account the very first time they log in.... I need to do this on the local machine... they will not be logging into a domain....

the script works on all accounts but the accounts that are already disabled.... if I enable the account the script works without any errors... any one know why this is?

I am having an issue with calling this from within another bat script....its in my other bat script liek the following: C:\windows\securityscript\pwexpire.cmd HelpAssistant C:\windows\securityscript\pwexpire.cmd Guest but it throws an error saying the file or directory cant be found...... says the error is at pwexpire.vbs(7,1) .... what am I doing wrong when I call this file? and yes it is going to the correct directory to run the file...

I am looking for a way to audit the C: drive for the Everyone group for all failures.... is there a command line way to do this as I am looking to add it to a security bat script?

This does not uncheck the "Password never Expires" box... but it will check it for you.. how can I make it uncheck the box?

Thank You.... this worked..... I thought I had tried this but I guess not.....

maybe I was a little vague on my issue..... I need the "Password Never Expires" box to be unchecked.....meaning that the password will expire according to my Group Policy setting.... is there a way to achieve this from the command line?

I have already tried that and it does not work..... the reason it needs a response is because its over the 14 char limit for OS below 2000..... try it and you will see.. It looks like it works but says no valid response was provided... any other suggestions? Is there a way to enter a carriage return without having to add an additional file?

From the command line is there a way to uncheck the "Password Never Expires" setting? I am doing this for the LOCAL machine only. I am trying to do this from a bat file that I will be running on computer after it has been syspreped. Any one know they command to do this?

OK heres my issue. I am writing a script that automatically creates a user account and sets a password. The problem I am having is when I run the bat file it requires user input because I am using a 16 char password. It either needs to have a carriage return or a Y. I have tried all I can think of to pass the Y and the carriage return but I cant seem to get it to work. Can someone help me out? Here is whats in the bat file: REM ############################################## REM # Create account REM ############################################## net user TestUser IhateThisStuff0! /add REM # need to add a Y or a carriage return in here