Local Security Policy bearbeiten

Star InactiveStar InactiveStar InactiveStar InactiveStar Inactive
 

@ECHO On
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: ::
:: LocalPolicy.bat ::
:: Version: 1.00 ::
:: ::
:: Beschreibung: Hinzufügen von Rechten in der ::
:: Local Security Policy ::
:: ::
:: ::
:: Erstellt am: 28.09.2009 ::
:: durch: Frank Wenzel ::
:: ::
:: ::
:: geändert am: 00.00.2000, xxx to Version 0.00 ::
:: geändert am: 00.00.2000, xxx to Version 0.00 ::
:: ::
:: ::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

::Arguments
::%1 = Computer
::%2 = account
::%3 = add or del

GOTO :%3

:: Example
:: ntrights -u Domain\RACF -m \\HOST +r SeBatchLogonRight
:: --------------------------------------------------------------

:add
::-> Act as part of the operating system
ntrights -u %2 -m \\%1 +r SeTcbPrivilege>>%1_PolicyLog.txt

::-> Adjust memory quotas for a process
ntrights -u %2 -m \\%1 +r SeIncreaseQuotaPrivilege>>%1_PolicyLog.txt

::-> Back up files and directories
ntrights -u %2 -m \\%1 +r SeBackupPrivilege>>%1_PolicyLog.txt

::-> Debug programs
ntrights -u %2 -m \\%1 +r SeDebugPrivilege>>%1_PolicyLog.txt

::-> Increase scheduling priority
ntrights -u %2 -m \\%1 +r SeIncreaseBasePriorityPrivilege>>%1_PolicyLog.txt

::-> Log on as a batch job
ntrights -u %2 -m \\%1 +r SeBatchLogonRight>>%1_PolicyLog.txt

::-> Log on as a service
ntrights -u %2 -m \\%1 +r SeServiceLogonRight>>%1_PolicyLog.txt

::-> Manage auditing and security log
ntrights -u %2 -m \\%1 +r SeSecurityPrivilege>>%1_PolicyLog.txt

::-> Restore files and directories
ntrights -u %2 -m \\%1 +r SeRestorePrivilege>>%1_PolicyLog.txt
GOTO :EOF

::DELETE
:del
ntrights -u %2 -m \\%1 -r SeTcbPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeIncreaseQuotaPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeBackupPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeDebugPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeIncreaseBasePriorityPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeBatchLogonRight>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeServiceLogonRight>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeSecurityPrivilege>>%1_PolicyLog.txt
ntrights -u %2 -m \\%1 -r SeRestorePrivilege>>%1_PolicyLog.txt
GOTO :EOF


:EOF