"Log on as a service" policy

[Guest]

Hi,

How can I change the Policy "Log on as a service" without using the "Local Security Settings" snapin ?
I need to change this policy as part of an installation where a new service user is added for running of a service. This user must then be added to the "Log on as a service" user list.

Is there any way to do this with a command line tool ? I have tried to look at secedit.exe but due to lack of documentation from MS I couldn't figure out how to do this.

I have also tried to search the registry for this, but the setting seems to be located elsewhere.

Best regards
TC

 

[Torgeir Bakken (MVP)]

How can I change the Policy "Log on as a service" without using the "Local Security Settings" snapin ?
I need to change this policy as part of an installation where a new service user is added for running of a service. This user must then be added to the "Log on as a service" user list.

Is there any way to do this with a command line tool ? I have tried to look at secedit.exe but due to lack of documentation from MS I couldn't figure out how to do this.

Hi

You can do a call-out to the resource kit tool ntrights.exe for this I
would think:

ntrights.exe +r SeInteractiveLogonRight -u <username/groupname>


How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?kbid=279664

How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?kbid=245207


Ntrights.exe is in the free Win2k3 resource kit (it works on Win2k as
well):

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

(The kit will install on WinXP or later)

 

[IBTerry [MSFT]]

You could use NTRIGHTS.

245207 How to: Determine NTRIGHTS Names and Meanings
http://support.microsoft.com/?id=245207
279664 How to Set Logon User Rights with the Ntrights.exe Utility
http://support.microsoft.com/?id=279664

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.