Over 1 million tech questions and answers.

edit local security policy through a batch file

Q: edit local security policy through a batch file

How do I add a restriction to the local security policy through a batch file (or a registry key, any method that I can script using batch/python is good)? I'm trying to add a restriction that disallows a path, but I plan to be doing it on quite a few computers that don't share a group policy, so a batch file or other script would be really handy. Thanks!

EDIT: Most of the computers are XP, so I posted this here, but would the same steps still apply to Vista?

RELEVANCY SCORE 200
Preferred Solution: edit local security policy through a batch file

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: edit local security policy through a batch file

first off i'll say i don't know the answer to your question.

but i would look at powershell.

i'm pretty sure you can't batch script security policy. registry is easy if you know the key(s) you need, so you could batch .reg files.

Read other 1 answers
RELEVANCY SCORE 97.6

Hi is it possible to fix/repair local security policy from the recovery console? This is on a Win7 x64 Ultimate machine.

I inadvertently stuffed the setting for "Access this computer from the network" by removing "Everyone" but not adding Authenticated Users before applying and can't login locally or remotely to my PC. For some reason there aren't any restore points either (my other PC with Win7 x64 Ultimate has many and I don't remember explicitly disabling or enabling on either PC).

Only thing I can do with it is access my network shared folders ironically!

Any assistance would be greatly appreciated.

A:How to edit Local Security Policy from recovery console

If you have a Windows 7 installation DVD or a system repair disk, you can boot the system with it. Select the default language, then choose "Repair your computer". Then select "Command Prompt". At the command prompt type:

net user administrator /active:yes

Hit Enter.

Remove the DVD, reboot the computer, and log into the built-in Administrator account.Then undo the changes.

Read other 8 answers
RELEVANCY SCORE 89.6

I want to check a particular windows user rights assignment local group policy applied or not through batch file in windows xp

the policy's are
1.1.1.1.1.1 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny log on through Terminal Services

1.1.1.1.1.2 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally

1.1.1.1.1.3 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs

1.1.1.1.1.4 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as a service

1.1.1.1.1.5 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Perform volume maintenance tasks

1.1.1.1.1.6 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Bypass traverse checking

1.1.1.1.1.7 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as a batch job

1.1.1.1.1.8 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Add workstations to domain

1.1.1.1.1.9 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Modify firmware environment values

1.1.1.1.1.10 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Enable c... Read more

Read other answers
RELEVANCY SCORE 82.8

I am running vista home premium sp1, and i have discovered microsoft disables local security policy edit snapin in microsoft management console.
I know most of the options in this snapin you can edit in the registry, but is there a way to enable this snapin through the registry and a download of secpol.msc?
its kinda annoying that a lot of mmc snapins aren't available in the home editions of vista.

A:Local Policy Edit?

bump
someone i just need a yes and a how or a simple no.

Read other 1 answers
RELEVANCY SCORE 82.4

Dear Friends,

Kindly help me to add the domain security group in local administrator group in all the local machines through remotely.

Regards,
Saravanan.R

Read other answers
RELEVANCY SCORE 80

I have some Windows 7 PC which are not in a domain, I need to disable the ability for any user(Inc. Admins) to change the time of these PCs. The setting for this is:
"Computer Configuration / Windows Settings / Security Settings / Local Polices / User Rights Assignment / Change the system time"
How can I do this from the command line so I can put it into a script? If there isn't a way to control gpedit from the command line, is there a registry key I can change to get the same result?
 
Thanks

Read other answers
RELEVANCY SCORE 79.2

Hi,
I have a question  that how to copy file from remote desktop user drive to my local machine using  xcopy or any other protocol.

This is my server path "\\Trail01" and here is the file location "c:\Users\ashique.sheikh\Desktop\Day2.R"
How can i give this is in my batch file. I have used this
net use "\\Trail01" "[email protected]" "/USER:ashique.sheikh"
XCOPY /Y \\Trail01\c:\users\ashique.sheikh\Desktop\Day2.R  "D:\VMI"
But its not working. It is give path error.
How can i download this or is there any other way to do it?

Read other answers
RELEVANCY SCORE 78.8

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

Read other 6 answers
RELEVANCY SCORE 78.4

Hi ,

I'm struggling for modify local group policy via cmd , anybody knows kindly share your knowledge ,
I can modified local group policy via GUI but i want to modify policy via command line ,
i'm just a beginner in cmd mode , power shell scripting.

#Please refer any guide or book for learning this ,

i want to block wifi-Direct in every client pc via cmdline

I'm waiting for your valuable advice and guidelines
i also searched in google but still i didn't get resolution

operating system : Windows 10 Pro 64
mode : work group
 

Read other answers
RELEVANCY SCORE 72.8

HI,
I would like to write a batch file to do the registry add values for interenet zone settings.This batch file should run each time after the reboot.
pls help

A:Reg edit using batch file

toms003,

Why is it neceesary to write to the same registry location more than once?

You could VBScript the RegWrite value you need, and have a scheduled task or at commnd run the vbscript daily, but I don't see why you would need to make the regwrite more than once.

Read other 5 answers
RELEVANCY SCORE 72

Is there a way to make a batch file that will automatically change Services? My main goal here is to 1 click edit all the services I change from disable,automatic, and delayed. I use the same settings for the entire family that I am tech support for so it makes life easier.

Anything I can do here?

A:Edit Services with Batch File

You can write a batch file using the sc command, which manages services from a command prompt (starting/stopping, changing their startup type, etc.)
Type sc /? into a command prompt to get more details on it.

Read other 2 answers
RELEVANCY SCORE 72

I'm having some difficulty with a (fairly) simple batch file.
I simply need to edit [HKEY_CLASSES_ROOT\.html] as certain pesky browsers like to change the value. Here is what I have:

REGEDIT4
; @ECHO OFF
; CLS
; REGEDIT.EXE /S "%~f0"
; EXIT
[HKEY_CLASSES_ROOT\.html]
"(Default)"="htmlfile"

It does everything perfect, EXCEPT it does not edit the (Default) value. Instead it just adds a second entry called (Default).

Any suggestions?

A:Batch file registry edit

I think you should do a Reg Delete for that keyname. Then do a Reg Add to restore what you want.

Here's some guidelines: Reg command help

But, I never have pesky browsers trying to change that value since I carefully check the options during install and turn off the nags or the automatic settings that would try to do that. You can do that after install in all the browsers I'm familiar with in 'Settings'.

Read other 13 answers
RELEVANCY SCORE 72

Hi. I want optimize my jobs and I write some batch file.
So I need to batch file do:
Open and edit C:/windows/system32/ "AUTOEXEC.NT" and "CONFIG.NT"
Just need add some lines at end of file and edit few lines at file. Is that possible? Can anyone give me some script example?

A:Batch file: need edit files.

A batch file is in the format .bat. And you can edit them simply by opening them up in Notepad.

Read other 8 answers
RELEVANCY SCORE 72

I have a problem of adding user in the section of "Access this computer from the network" & "act as a part of the opreating system"

I am explaining the route i:e
Control Panel->Administrative Tools->Local Security Policy->User Right Assignment
in the right pane u'll see both option that are "Access this computer from the network" & "act as a part of the opreating system"...
after double clicking on it there will be a option

"Add users or Group"
that option is disabled......i want to add user their for my requirement .....
So please assist me that how can i able to enable this option and from where...

Thanks

Read other answers
RELEVANCY SCORE 72

Friend of mine has problems in setting Local Security Policies. He tried gpcedit.msc and secpol.msc and he tried Control Panel > Administrative ToolsSelect: Local Security Policy (when prompted, click Continue)In the left pane, expand Local Policies and click Security Options.In the right pane, scroll down to User Account Control:Double-click on: "Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode"In the drop-down box on the Local Security Settings tabSelect Elevate Without Prompting, Click Apply/OK.Note: run Windows Vista with UAC turned off as this also turns off the "Protected Mode" in Internet ExplorerNo sign of LSP. Any other suggestions?

A:Local Security Policy

Try typing "Local Security Policy" at the Start button (without the quotes) - it brought it up in my copy of Ultimate (maybe this is an issue with Vista Home being like XP Home?).

Read other 4 answers
RELEVANCY SCORE 72

Hi

Im wondering if someone can help me disable the run command in windows 7 local security policy for local users, i can apply a number of different setting but i can seem to the policy for run command

thanks

A:Local Security Policy

Did you see this: Run Command - Enable or Disable

Read other 1 answers
RELEVANCY SCORE 72

In Win vista home premium there is no local security policy . Any way to get it , or any path .

Thanks in advance.

A:Local security policy

Local Security Policy has not been provided in the Vista Home Premium Edition.
What exactly do you want to use the LSP for?

Regards,
George

Read other 4 answers
RELEVANCY SCORE 72

I'm running windows XP pro, and when I go the control panel/admin/ I'm missing Local Security Policy. Any ideas How I can get it back?

Thanks
Jill
 

A:Local Security Policy

%SystemRoot%\system32\secpol.msc /s

That's the path to the shortuct in mine, just recreate it.
 

Read other 3 answers
RELEVANCY SCORE 72

I can't find local security policy under administrative tools on control panel, i have also tried accessing it by going to run and typing "secpol.msc" and it says windows can not find "secpol.msc" Im wanting to get into the local security policy as i want to set the password expire date and to promt users to change their password on first login, how can i get the local security policy or is there another way of doing what i want to do. I am also the administrator of the computer

System:
Microsoft Windows XP
Home Edition
Version 2002
Service Pack 2

Many Thanks
Louis

A:No local security policy

Hi loubymar !

Unfortunately that feature is only availabe on XP pro.

Read other 1 answers
RELEVANCY SCORE 72

The local security policy in Windows XP was working, now it cannot initialize.

Any Ideas what to look for?

Thanks
 

Read other answers
RELEVANCY SCORE 72

Under Administrative tools, I don't see " Local Security Policy" to set some of the advanced Security UAC policies. I have 1 Laptop running Basic, 1 Running Premium and neither have the Policies Im looking for.

I have Business Vista loaded in Virtual PC to play around with settings and such, and this does have it. Does Local Security Policy only come on business and above versions of Vista?

To map this out: Start=>Control Panel=>System and Maintance=> Admin Tools. Off of Admin Tools I should see "Local Security Policy" But I dont. Any Ideas why?

A:Local Security Policy

secpol.msc Is not included in Basic or Premium.

Read other 6 answers
RELEVANCY SCORE 71.2

Hi guys,

Long time reader, first time poster.

I have a batch file, named lima.bat which has the following code in it:


Code:
del *.bin
setx GPU_MAX_ALLOC_PERCENT 100
setx GPU_USE_SYNC_OBJECTS 1
color 02
C:\Users\user\Desktop\MineIt\cgminer.exe --config C:\Users\user\Dropbox\Lima\gigabyte-gold.conf
Currently this works perfectly, all *.bin files are deleted, the two environment variables (lines 2 and 3) are set, and then the window color is set before the cgminer.exe begins. cgminer.exe runs inside the command prompt window.

Now what I am trying to do (and failing at) is make it so that the cgminer.exe runs at higher CPU priority. I am trying to make it run at "ABOVENORMAL" or "HIGH" priority but am not sure how to make that happen and also keep the window color.

Could anyone assist please? Thank you very much!

A:Trying to edit a batch file to run with a higher CPU priority

Hi,

IIRC, the CPU priority can be set from the START command.. Here is the help text..


Code:
C:\Users\Tanya>help start
Starts a separate window to run a specified program or command.

START ["title"] [/D path] [/I] [/MIN] [/MAX] [/SEPARATE | /SHARED]
[/LOW | /NORMAL | /HIGH | /REALTIME | /ABOVENORMAL | /BELOWNORMAL]
[/NODE <NUMA node>] [/AFFINITY <hex affinity mask>] [/WAIT] [/B]
[command/program] [parameters]

...
LOW Start application in the IDLE priority class.
NORMAL Start application in the NORMAL priority class.
HIGH Start application in the HIGH priority class.
REALTIME Start application in the REALTIME priority class.
ABOVENORMAL Start application in the ABOVENORMAL priority class.
BELOWNORMAL Start application in the BELOWNORMAL priority class.
NODE Specifies the preferred Non-Uniform Memory Architecture (NUMA)
node as a decimal integer.
AFFINITY Specifies the processor affinity mask as a hexadecimal number.
The process is restricted to running on these processors.

The affinity mask is interpreted differently when /AFFINITY and
/NODE are combined. Specify the affinity mask as if the NUMA
node's processor mask is right shifted to begin at bit zero.
The process is restricted to running on those processors in
common between the specified affin... Read more

Read other 1 answers
RELEVANCY SCORE 71.2

What can I do in the LSP to enhance my machine and windows 7? I love customization, but don't want to go in to anything an start clicking. I really don't know what else I can do with it inside the LSP. For example, I added the CTL + ALT + DEL function.

Is there anything else or not?

A:Customize Local Security Policy

Guess thats about it.

Read other 2 answers
RELEVANCY SCORE 71.2

A new network admin came to our office and he restricted all the users in Local Security Policy. I can not install or remove a program, and can not access many other tools of windows that i use on daily basis. Even USB is not working. Is there any solution or way to bypass this security policy. I,m using windows 7 and i,m a user. He has the admin account.

A:How to bypass local security policy?

Hello to BC
Due to our forum rules we really cannot help you do what you want to do. Your admin probably implemented it as a security feature to prevent bad software from being installed on the machines, I would go ask him if you need to install something.
Per this forum rules:"No subject matter will be allowed whose purpose is to defeat existing copyright or security measures. If a user persists and/or the activity is obviously illegal the staff reserves the right to remove such content and/or ban the user. This would also mean encouraging the use or continued use of pirated software is not permitted, and subject to the same consequences. "

Read other 2 answers
RELEVANCY SCORE 71.2

Sorry if this thread already exists but just wondering if there is any way to apply the local security policy in windows XP pro to only one account? Specifically apply to every account but the administrator account, as a limited administrator account is useless to me.

Thanks.
 

A:Solved: Local Security Policy?

For almost every policy in secpol.msc, you assign the attributes of that policy to particular users or groups. Administrators can be left out if you like.
 

Read other 3 answers
RELEVANCY SCORE 71.2

I need to change some settings in the Local Security Policy but when I go into Control Panel-->Administrative tools, it is not there. Does anybody have an idea of where else Local Security Policy would be? Is there a Run command I could enter?
I am running Windows XP Home SP2.
Thanks.
 

Read other answers
RELEVANCY SCORE 71.2

Hello I am using Windows 7 Ultimate x64 and trying to change a few simple policy's' I am currently the only user on the computer. When I open the Local Security Policy editor I get no useful settings or options.

A:Local Security Policy problem

You have to expand the trees...

Read other 7 answers
RELEVANCY SCORE 71.2

When selecting the local Security Policy I receive error

* Snap- in failed to initialise
Name: Group Policy
CLSD ( 8FCOB734-AOE1-11D1-A7D3-0000F875771E3 )

When selecting OK
Error ** Red cross

Snap-in Creation failed. The snap in is not created,it may not be installed properly
Nmae: Grop Policy

See attachment for error messages

Can anyone advise thanks ..
 

A:XP error ( Local Security Policy )

Just to add...

I beleive this is where I go to stop Microsoft Messenger from
loading when I start Outllok Express??
 

Read other 1 answers
RELEVANCY SCORE 71.2

I am running Vista Home Premium. I know it does not have the Local Security Policy. Does anyone know how I can go about changing auditing services like turning on Logon Success and Logon Failure audits. Also, do you know where to change the options for password lengths, complexity, and expiration's?

Thank you,

David
 

A:Solved: Local Security Policy

Read other 7 answers
RELEVANCY SCORE 71.2

Hey guys,

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

Any help would be appreciated...

A:Cannot find local security policy

  
Quote: Originally Posted by Delphin


Hey guys,

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

Any help would be appreciated...



sorry to disturb u guys. I found it.

Local Security Policy Editor - Open

Read other 2 answers
RELEVANCY SCORE 71.2

I have a new machine with vista ultimate, trying to access vista home computer on the network. Vista home does not have local security policy in admin tools, how can I get the "login failure" error resolved without being able to change who can access the computer?
 

A:Need quick help to get local security policy!

Read other 8 answers
RELEVANCY SCORE 71.2

Hi,
I was just wondering after looking through the Local Security Policy area of windows Vista if;

You can disable the changing of the option to view hidden files or folders for all users except Administrators.
Also if you can disable the searching of hidden files or filders for all users except Administrators.

Ive looked in the Policy but cant see anything there, i thought it could of been an option.
Is there a script anywhere or registry editing?

Plus what settings in there would you disable for most users, can you disable CMD?

Thanks.
 

A:Questions about Local Security Policy

nvrmnd
 

Read other 2 answers
RELEVANCY SCORE 71.2

Hi there. (1st time poster, long time reader)

Would would you recommmend changing (for security reasons) from the original default settings in local security policy.

I'm connecting directly to a modem with a single PC that's not used for file sharing or remote use etc.
Thanks for any help.
Regards,
TwistedZombie

A:Local Security Policy Recommended Changes?

Are you referring to using I.E. 9 and it's security settings?

Read other 9 answers
RELEVANCY SCORE 71.2

Hi, All

K so I have windows 7 pro 32bit installed on my little brothers pc.. He's pretty young so my goal is to setup a pretty kid safe desktop/browser environment...I currently have his account setup to autologon into his limited user account..Whenever I try to go into gpedit from his account as admin it sets everything I want to change to both the admin and the limited account (disabling control panel, etc etc)..Am I missing something here or is this just how it is when setting up policies on local machines? Any tips/advice is greatly appreciated..thanks

A:Local Security Policy Question

Policies apply to all users. You can follow this procedure to apply policies all users except Administrators:
How to apply local policies to all users except administrators in a workgroup setting in Windows 2000
Applies to XP, Vista, and Win 7 as well as Win2K

Read other 6 answers
RELEVANCY SCORE 71.2

Hi guys,

Need your guidance in understanding Local security policy

1) I have configured local security policy in windows 7 professional under run-->secpol.msc--> Securuity policies-->Account policy---->Password policy

a) Minimum password length is set to 8 characters
b) Password must meet complexity requirements is enabled (I have set a password which has lower case/number and special character)
c) Maximum password age is set to 3 days

This means password will expire in 3 days. I need to change the password after 3 days correct?

d) Enforce password history---15 passwords remembered

This means the last 15 passwords is remembered so that user will not go back to the previously used password. Is this correct?

e) Minimum password age

I have set the minimum password age to 1

Does this mean password can be changed after 1 day?
Does this mean password cannot be changed before 24 hours (Once the password is set)? I may be wrong here because I was able to change the password before 24 hours. If I'm wrong please explain me what is minimum password?

Also for point d) Initially I set the password as "X" and then changed to "Y", I changed it back to "X" and still there was no error. Enforce password history says we cannot use the same password which was used previously but I did not get any error while changing the password (Changed it to the same password "X" which I used in the first instance).
Please help me in understan... Read more

A:Local security policy in windows 7

Hello RFED,

That's how I understand it.

Just to verify, did you also enable password expiration to enforce your min/max password age?

Password Expiration - Enable or Disable

Password History Enforcement - Enable or Disable

Read other 9 answers
RELEVANCY SCORE 71.2

Question, anyone know why I have no "Security Policy" available on a Dell supplied version of XP Pro?
I bought XP Pro OEM for my older pc and able to make specific changes, but not on my new PC.
Is this feature turned off, or you think I can install it with my OEM CD?

Thanks, confused
 

Read other answers
RELEVANCY SCORE 71.2

Okay, so, I was going to restrict access to my computer to a limited account for everyone else since I had unexpectedly discovered nasty malware on my system. So I go to Control Panel Administrative Tools Local Security Policy. Then I get this message:

"The Group Policy security settings that apply to this machine could not be determined. The error returned when trying to retrieve these settings from the local security policy database (%windir%\security\database\secedit.sdb) was: The parameter is incorrect. All local security settings will be displayed, but no indication will be given as to whether or not a given security setting is defined by Group Policy. Any local security setting modified through this User Interface may subsequently be overriden by domain-level policies."

I can't figure out what this idiot did to my computer. Just before this happened I had to fix a logon log off loop on my machine. I just want to know if there is any possible way I can just copy and paste the entire contents of C:\WINDOWS from the Win XP Pro Install CD to my HDD? I do NOT want to format and reinstall. Please help.
 

A:PROBLEM with Local Security Policy and more

Oh yeah, and I forgot to say,

I right click on policy and click properties... Nothing happens. Same with help for ALL of Windows. Its like half the registry and actual Windows files just went *poof* gone.
 

Read other 2 answers
RELEVANCY SCORE 71.2

I'll precede my question by stating that I had a couple viruses that I believe are gone now, the problems I am having may be remnants of them. First problem was with Office install, there was a restriction on a registry key, I was able to get the permissions back for the key and installed successfully. Now I am trying to update to Windows Media Player 11, and am getting an error code C00D2AFB also 80070005 General access denied error. Which I think may be another restriction problem. Have had no problems with any other software vendors other than Microsoft. Also I don't know if this is odd but, under administrative tools there is NO Local Security Policy listed there, but this is XP Sp2 Home, I don't know if that is only for professional. How can I get it back, and restore all policies to default?

A:Local Security Policy Missing?

It's not listed on my XP Home machine either

Read other 6 answers
RELEVANCY SCORE 71.2

I am setting up my local security policy, I want users to use at least 5 unique passwords before they are allowed to use a password they have already used.

Any help on setting this up would be good.

I know it's in the local security policy under passwords, however I forget how to make this change.
 

A:Passwords/Local Security Policy

deeger said:

I am setting up my local security policy, I want users to use at least 5 unique passwords before they are allowed to use a password they have already used.

Any help on setting this up would be good.

I know it's in the local security policy under passwords, however I forget how to make this change.Click to expand...

If you are using XP, i think that the password policies are in the ADmin folder and...doc
 

Read other 3 answers
RELEVANCY SCORE 71.2

Ok, here is my issue I was trying to change my sharing settings so my dad could read a folder on my laptop which I went to the advanced sharing and had selected share. He still was not able to access this folder. I went to my Network and Sharing Center and made sure network discovery, file and printer sharing were on and password sharing was off. I still was not able to share my folder so I undid all of that. I then read this article about changing the local security policy. I went to the local security policy and went to Local Policies then Security Options and scrolled to Network Security: LAN Manager Authentication level and changed it to Send LM & NTLM - use NTLMv2 Session security if negotiated. The default of this policy was set to nothing before. I cant seem to change it back to the default which was set as nothing. Will having this policy set affect any programs or applications at all ? Is there a way to change it back ? If you cant help with my sharing problem can you at least help me figure out how to set this Security Policy back to its default. thanks

A:Local Security Policy - Windows 7

For the sharing issue, you can just create an admin account, give your father the name and password of it, and add the account to the permission list.If you do not would like to do this (as you choose the option "password protect off"), you can modify this group policy:Computer Configuration --- Windows Settings --- Security Settings --- Local Policies --- Security Options, find this:Network access: Sharing and security model for local accountsChange it to Guest Only. Here is the explanation:If this setting is set to Guest only, network logons that use local accounts are automatically mapped to the Guest account. By using the Guest model, you can have all users treated equally. All users authenticate as Guest, and they all receive the same level of access to a given resource, which can be either Read-only or Modify.

Read other 4 answers
RELEVANCY SCORE 71.2

Hi,

My local security policy on my Win 7 Pro x64 machine is only showing a limited set of policies (see below). I need to modify "Network security: LAN Manager authentication level" in order to remotely connect to my PC at work. But that policy does not appear in my local security policy. I have tried the following:

1. using "Security Compliance Manager" and "Local GPO" to install the default set of policies.
2. adding "LmCompatibilityLevel" registry key set to "1", see: LmCompatibilityLevel.
3. at least three "sfc /scannow" followed by restarting.

with no luck. Would appreciate your insights. ced

A:Incomplete local security policy

Try the search here:

Group Policy Search

Use the filter and tree views to find out how to apply the required settings either via Local Security Policy or via the registry if the LSP setting is not available on your machine.

As for LMCompatibility Level - I had the same issue and manually created the required registry key. I ran the software mentioned in the following link on another forum.

https://forum.avast.com/index.php?to...3725#msg943725

It provides links to resources about LMCompatibility Level (if it detects that it needs fixing)

Read other 1 answers
RELEVANCY SCORE 71.2

A new network admin came to our office and he restricted all the users in Local Security Policy. I can not install or remove a program, and can not access many other tools of windows that i use on daily basis. Even USB is not working. Is there any solution or way to bypass this security policy. I,m using windows 7 and i,m a user. He has the admin account.
 

A:How to bypass local security policy?

You take it up with them. This is a work environment, and they put those policies in place for a reason, and we will not assist in bypassing them. May want to re-read the rules page at techguy.org/rules.html

As a result, I'm going to have to close this thread. Thanks for understanding,

v
 

Read other 1 answers
RELEVANCY SCORE 70.4

Hi,
Can anyone out there write me a batch file or exe file which will also change permissions in the Windows registry?

What I am trying to do is to block social networking sites - Facebook, Twitter etc.
I normally do this by editing the windows hosts file by looping back all known sites to the local machine.
I then change the permissions to read for all users including admins.
Next I change the file to read only & hide it.
I would like this batch/exe to be easy to change as other social networking sites etc appear.
I would also like this batch/exe to work across Windows platforms XP Vista & 7
If there was a problem with the location of Windows then assume the operating system is installed on C:
Can this be done? or am I asking the impossible. (or is there an easier way of doing this)

Thanks for any help

Rob
 

A:edit hosts file using batch/exe file?

Read other 8 answers
RELEVANCY SCORE 70.4

reg add HTLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DontDisplayLastUserName /t REG_DWORD 00000001 /f

I am trying to hide all users at logon and I know this is where you change it but for some odd reason the syntax is wrong and I can not figure it out. Can someone please help me fix this?

A:Problem with batch file command to edit registry

I figured it out all. My problem lied in a few small argument issues and missed quotation marks. For future references this is the correct syntax.

reg add "HTLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DontDisplayLastUserName" /t REG_DWORD /d 1 /f

Read other 1 answers
RELEVANCY SCORE 70.4

Hi,

I have Windows 10 Pro v1511 (Nov upgrade). If you go to Local Security Policy > Local Policies > Audit Policy and set a policy, it doesn't stick. If you close and reopen the app again, the previous settings are still there. Is anybody experiencing this ? Please confirm or deny that this is happening on your rig.

Also when Local Security Policy starts, there is an error message about some admx configuration file. Also new to v1511.
 

A:v1511, Local Security Policy being 'forgetful'

I googled about the configuration 'admx' file issue, and it is known to MS.
See this:
https://technet.microsoft.com/en-us/windows/dn764773.aspx
 

Read other 2 answers
RELEVANCY SCORE 70.4
A:Backup/Import Local Security Policy?

Technically local security policy is by definition "local" to that machine. You can try copying the contents of one machines' LGPO contents to another, but this isn't always going to work. I guess the question is, are all of the settings you are modifying in the local GPO policy? If so, they're all just registry settings, so figuring out which registry value each policy changes and to what data you'd like the value set means you can really do this with a .reg import of the settings. Unless you're modifying things like adding certificates or setting service configuration (both of which can be scripted using other tools, btw), anything in the Administrative tools section (and a lot of things in the other sections) are just registry values.

Read other 3 answers