dslider
Content Type
Profiles
Forums
Events
Posts posted by dslider
-
-
How can I set DCOM: Machine access restrictions in security descriptor definition language and DCOM: Machine launch restrictions in security descriptor definition language? This is for a script I am writing. I am compiling the Group policy settings into an inf file. Which I am calling in the script (from a bat file):
%sys32%\secedit.exe /configure /db %POST_SYSPREP%\XPClient.sdb /cfg %POST_SYSPREP%\security_services.inf /log %systemroot%\security_services.log /quiet
How can I set these setting within my inf file?
0 -
yes they have 4 video cards in them that are all identical
0 -
I have a image I want to be able to put on a few different machines. They are all the same just different physical boxes... I am having an issue with the video drivers not loading on another box after I sysprep the image and push it up to our storage. The video loads fine on the box the image was created on but if I bring it down on a different machine it wont load the video drivers. I can boot into safe mode and install the drivers and then reboot into normal mode and it works fine but I dont want to have to do this since the image will be sent out to more then one location and I will not be installing all of them. The video drivers are the only ones that dont load. Any suggestions?
0 -
Maybe I wasnt clear... I know about runonce... but what I need to do is have a script that runs the very first time a user logs into the machine.... so if I create a new user and then go to log into that users account it needs to run the script one time.. so fr every new user it needs to run the script..... is there a way to do that?
0 -
Is there a way to run a script the very first time a user logs into a computer? What I need to do is run a security script on the users account the very first time they log in.... I need to do this on the local machine... they will not be logging into a domain....
0 -
the script works on all accounts but the accounts that are already disabled.... if I enable the account the script works without any errors... any one know why this is?
0 -
I am having an issue with calling this from within another bat script....its in my other bat script liek the following:
C:\windows\securityscript\pwexpire.cmd HelpAssistant
C:\windows\securityscript\pwexpire.cmd Guest
but it throws an error saying the file or directory cant be found...... says the error is at pwexpire.vbs(7,1) .... what am I doing wrong when I call this file?
and yes it is going to the correct directory to run the file...
0 -
I am looking for a way to audit the C: drive for the Everyone group for all failures.... is there a command line way to do this as I am looking to add it to a security bat script?
0 -
Here is a batch file that uses a vbscript to perform the task:
Save this as pwexpire.cmd
@echo off
if not [%1]==[] (
echo Const ADS_UF_DONT_EXPIRE_PASSWD = ^&H10000 >.\pwexpire.vbs
echo Dim User >>.\pwexpire.vbs
echo Dim usrflags >>.\pwexpire.vbs
echo Set User = GetObject^("WinNT://./%1,user"^) >>.\pwexpire.vbs
echo usrflags= User.Get^("UserFlags"^) >>.\pwexpire.vbs
echo User.Put "userFlags", usrflags Or ADS_UF_DONT_EXPIRE_PASSWD >>.\pwexpire.vbs
echo User.SetInfo >>.\pwexpire.vbs
echo Set User = Nothing >>.\pwexpire.vbs
cscript //nologo .\pwexpire.vbs
if exist .\pwexpire.vbs del .\pwexpire.vbs
)Call this batch file like this:
pwexpire.cmd userid
This does not uncheck the "Password never Expires" box... but it will check it for you.. how can I make it uncheck the box?
0 -
Try this:
net user TestUser IhateThisStuff0! /add /y
Thank You.... this worked..... I thought I had tried this but I guess not.....
0 -
maybe I was a little vague on my issue..... I need the "Password Never Expires" box to be unchecked.....meaning that the password will expire according to my Group Policy setting.... is there a way to achieve this from the command line?
0 -
I have already tried that and it does not work..... the reason it needs a response is because its over the 14 char limit for OS below 2000..... try it and you will see..
It looks like it works but says no valid response was provided...
any other suggestions? Is there a way to enter a carriage return without having to add an additional file?
0 -
From the command line is there a way to uncheck the "Password Never Expires" setting? I am doing this for the LOCAL machine only. I am trying to do this from a bat file that I will be running on computer after it has been syspreped. Any one know they command to do this?
0 -
OK heres my issue. I am writing a script that automatically creates a user account and sets a password. The problem I am having is when I run the bat file it requires user input because I am using a 16 char password. It either needs to have a carriage return or a Y. I have tried all I can think of to pass the Y and the carriage return but I cant seem to get it to work. Can someone help me out?
Here is whats in the bat file:
REM ##############################################
REM # Create account
REM ##############################################
net user TestUser IhateThisStuff0! /add
REM # need to add a Y or a carriage return in here
0
security settings
in Windows XP
Posted
I fixed this issue.. I had a typo in the inf file that was keeping it from setting the permissions