Disable Remote Login from commandline

[Virindi]

Hi all,

I'm working on a windows installer that adds a new user to the system to run scheduled tasks.

I generate a random password, add the user, and schedule the tasks.

Here's the thing I can't figure out so far:

For security, I want to disable remote login for that account. I think there's a utility for windows that can do this, in the Resource Kit. But I can't depend on the kit being installed - I have to assume the end user won't have it.

I also can't re-distribute the program(s) that comes as part of the Resource Kit, as part of my installer - we don't want to make Microsoft angry

Anyway, I see two programs that come as part of the Resource Kit that would do the job:

Ifmember.exe - Manage user group association

Ntrights.exe - Manage user rights

I am trying to figure out if anyone knows a way (through registry manipulations, another open-source alternative that I could include in my installer, or anything really) to disable remote login rights for my new user. I would prefer something that works on Win9x as well as 2000/XP, but anything would help... even if the solution only worked on 2000 and up (I can warn the user that I can't disable remote login for their OS because it's too old or something).

Any help would be greatly appreciated.

Edited March 8, 2006 by Virindi

[Noise]

I believe that the "Access this computer from the network" right is granted at the group level. By default the "Access this computer from the network" is given to the following groups:

• Everyone
  
• Administrators
  
• Authenticated Users
  

You may want to consider moving your new user out of the Everyone group and into the Users group. This should keep the new account you are creating from accessing the PC over the network - in other words they must be logged on physically at the PC.

[Virindi]

I will definately give this a shot. Thanks very much for the help.