Local Security Policies

G

Guest

I am currently working on a windows app in C# that when given a computer's
name needs to check local security policies on that computer across the
server. Some of the policies I would like to check are the auditing
policies, such as "Audit Logon Events" and "Audit Policy Change," etc, I
would like to be able to retrieve whether these policies are set to "Success"
or "Failure" on the remote computer. Also I would like to check the "user
rights assignment," such as "Access this computer from the network," etc.,
for these policies I would like to retrieve who the policies are limited to,
i.e. Admin, users. And finally I would like to access the "Security
Options," to check and see if the guest account is disabled, for example. I
would like to be able to enter and computer name and have the program check
all of the settings on that computer and create a log of those settings that
are incorrect.

I am still fairly new to C# and have never done any programming dealing with
LSA or WMI stuff, so any help is greatly appreciated. I have been doing
internet searches for help on this topic for several days now, and would love
it if I could get some of this working. The ideal situation would be to have
the ability to change the settings on the remote computer if they are not set
properly, however I would be happy if I could just figure out how to access
them and read them. Any help (internet sources, recommended books, example
code, etc.) would be great. I personally learn best from examples of the
functions being used but like I said I would appreciate any help. I am
currently using a System.ManagementObject to determine the operating system
and confirm the pc name of the remote computer, and have been able to check
policies such as the "Maximum Password Age," "Lockout Threshold," etc. using
a DirectoryEntry and LDAP. So I have had a few successes but I have been
stuck on checking the previous policies. Please let me know if it is
possible to remotely check these security policies and what I need to use to
do it, whether it is WMI, LSA, System.Management stuff, etc. I have tried
several messageboards and attempted contacting individuals through e-mail,
all to no avail. So your help is appreciated, thanks in advance
 
G

Guest

I am proud of this topic. I have posted on five different C# message boards
and have yet to get help. I guess it is as hard as I think it is. Thanks
for taking a look tho.
 
G

Guest

I am proud of this topic. I have posted on five different C# message boards
and have yet to get help. I guess it is as hard as I think it is. Thanks for
taking a look tho.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top