Vista Home Premium, Local Security Policy

[Guest]

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

 

[Carey Frisch [MVP]]

Visit: http://www.lockergnome.com/nexus/windows/2007/02/27/find-the-local-security-settings-in-vista/feed/

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------­-----


Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

 

[Guest]

Hi Carey,

Thanks for your prompt response.

I have already been through the link you have provided. Actually, it doesn't
state how can I change the settings for that particular parameter 'Logon as a
Batch Job'.

Can you pls give me some details, how can I set that.

Thanks & Regards
SIS

 

[Carey Frisch [MVP]]

Windows Vista Home Users:

1. Press the Windows key, type regedit and press Enter. Browse down to this registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
2. You should see a key called PromptOnSecureDesktop. Double-click this and change the value to 0 (zero)

To assign the "Log on as a batch job" user right to the Performance Log Users group:

1. Click Start, click in the Search box, type secpol.msc, and press ENTER.
The Local Security Policy snap-in will open in Microsoft Management Console.
2. In the navigation pane, expand Local Policies and click User Rights Assignment.
3. In the console pane, right-click Log on as a batch job and click Properties.
4. In the Properties page, click Add User or Group.
5. In the Select Users or Groups dialog box, click Object Types.
Select Groups in the Object Types dialog box and click OK.
6. Type Performance Log Users in the Select Users or Groups dialog box and then click OK.
7. In the properties page, click OK.

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------­-----

"SIS" wrote:

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

 

[Jimmy Brush]

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

Hello,

You can use the NTrights.exe command-line tool, available as a free
download from Microsoft as part of the Windows Server 2003 Resource Kit
Tools:

http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD

You will need to run the tool from an elevated command prompt
(right-click command prompt, click Run As Administrator).

 

[Guest]

Dear Carey,

Sorry for the delay in response.
I tried the step-by-step process as described by you. But I am unable to
find the secpol.msc. After setting the "PromptOnSecureDesktop" to 0, I tried
running secpol.msc, it say cannot find the file specified.

Where can I find that file. What is the other possible way.

Thanks
SIS

 

[Guest]

Hi Jimmy,

But I could not find any option for setting the value for 'Log on as a Batch
Job', in NTrights.exe, which actually I need to set.

Pls respond.

Thanks

 

[Jimmy Brush]

Hi Jimmy,

But I could not find any option for setting the value for 'Log on as a Batch
Job', in NTrights.exe, which actually I need to set.

Pls respond.

Thanks

Hello,

You can do it with NTrights, but the correct switch is not listed in the
help output for some reason. It is the SeBatchLogonRight option (case
sensitive).

e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight

Make sure you run the command from an elevated command prompt
(right-click, run as administrator).

See: http://support.microsoft.com/kb/279664

- JB

 

[Guest]

Hi Jimmy,

Thanks for your response. I tried the way as described by you, but I
received the following error:

C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
Granting SeBatchLogonRight to LOCAL\administrator ... failed
(GetAccountSid(L
OCAL\administrator)=1332

What could be the reason.

Thanks & Regards
SIS

 

[Guest]

I am having a similar problem to the one SIS described, except that I need to
be able to modify the "LAN Manager authentication level" security policy. I
need to do this to be able to map a network drive on a Novell file server
cluster.

Any help would be apreciated.

Thanks...

 

[Guest]

Hi All,

Pls any updates on this.

Regards
SIS

Hi Jimmy,

Thanks for your response. I tried the way as described by you, but I
received the following error:

C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
Granting SeBatchLogonRight to LOCAL\administrator ... failed
(GetAccountSid(L
OCAL\administrator)=1332

What could be the reason.

Thanks & Regards
SIS

 

[Guest]

Aloha SIS,

Try Start -> Run -> gpedit.msc

In theory, that should open the Group Policy Editor. Once there you should
find the "Log on as a batch job" policy under Computer Configuration ->
Windows Settings -> Security Settings -> Local Policies -> User Rights
Assignment.

I found the reference GPEdit.msc in one of my reference books, but I haven't
been able to try this yet in a Vista Home Premium environment. Let me me
know how it works for you.

Good Luck.