Log on As Service

[BattleAngel444]

Hi All

Is there a way in CD or TD to add a user to "Log on as a service" under
Admin Tools -> Local Security Policy -> Local Security Policy ->
Security Settings -> Local Policies -> User Rights Assignment -> Log on
as a service

I would assume there is a componenet some where that lets me set that
setting. If not there has to be some kind of call that i can make to
add a user to the list.

thanks for your time (again)
-Garvin

 

[Guest]

Have a look here for a C# project that will do the trick:

http://www.thecodeproject.com/csharp/lsadotnet.asp

Down in the user feedback/comments section is a complete VB.NET version, too:

http://www.thecodeproject.com/csharp/lsadotnet.asp?df=100&forumid=16643&select=1010132#xx1010132xx

Let me know if this works out for you

-Matt

 

[Nick Nehrhood /MSFT/]

Hi Garvin -
No - CD && TD do not have this capability. I did find a couple links
though that could prove useful in creating a solution which would match the
behavior that you're trying to achieve. Please check these out and see if
they help you at all.

http://72.14.207.104/search?q=cache...+on+as+service"+wmi&hl=en&gl=us&ct=clnk&cd=24
(Note - this is a cached link so it can become stale at any time)
http://www.codeguru.com/forum/showthread.php?t=329616

Essentially I'm pondering a solution by either using WMI or the ntrights.exe
utility that comes with the Win2k & WS03 Resource Kits. Below is the text
from the cached link above - just in case that link does become stale and no
longer load.


****Text copied from first link in this post******
19-11-2003, 12:11 AM
Torgeir Bakken (MVP)
usenet poster

How To Add User Rights Assignments Through Script

--------------------------------------------------------------------------

Robert Elliott wrote:

Does anyone know how to add user rights assignments to an existing
user
account? I want to add the Log on as Service right to a local admin
account.

Hi

You can do a call-out to the Win2k resource kit tool ntrights.exe for
this:

ntrights.exe +r SeServiceLogonRight -u username


How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?kbid=279664

How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?kbid=245207


Ntrights.exe is also in the free Win2k3 resource kit (it very well
might work
on Win2k as well):

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/...&DisplayLang=en

(The kit will install on WinXP or later, but you can copy Ntrights.exe
to a
Win2k computer and try it out if necessary)


Or you can create your own program, an account can also be granted the
user
right programmatically through the Local Security Authority (LSA) API
calls.

132958 How to Manage User Privileges Programmatically in Windows NT
http://support.microsoft.com/defaul...kb;EN-US;132958



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328
page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


**************************************

I don't want to steal someone elses' thunder. Hope this information
helps. Cheers.

--
Nick Nehrhood
(Windows Embedded Group)


Embedded team blog: http://blogs.msdn.com/embedded/