local policy security

[dw]

Archived from groups: microsoft.public.win2000.security (More info?)

We need to add a domain user to the locaL POLICY security of 300 servers via
an automated script or such????


security policy we need to add the userid to:

Generate Security Audits.
Managing Auditing and Security Log.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

If those servers are in the same OU structure you can create a GPO for the OU and
configure it by adding the domain user to those user rights under security
settings/local policies/user rights. Otherwise you could do it with a startup script
using the ntrights command. See the links below on ntrights. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;315276
http://support.microsoft.com/default.aspx?scid=kb;en-us;245207

Example:[ ntrights -u mydomain\username +r SeAuditPrivilege ]


"dw" <dw@discussions.microsoft.com> wrote in message
news:865354B1-D243-488D-804A-9080E49B00FC@microsoft.com...
> We need to add a domain user to the locaL POLICY security of 300 servers via
> an automated script or such????
>
>
> security policy we need to add the userid to:
>
> Generate Security Audits.
> Managing Auditing and Security Log.
>

 

[dw]

Archived from groups: microsoft.public.win2000.security (More info?)

Thank you

but the links are for windows nt 4.0 and xp we need one for windows 2000
the GPO is a good idea except when we tried this it locked up all the security event logs access.


"dw" wrote:

> We need to add a domain user to the locaL POLICY security of 300 servers via
> an automated script or such????
>
>
> security policy we need to add the userid to:
>
> Generate Security Audits.
> Managing Auditing and Security Log.
>

 

[dw]

Archived from groups: microsoft.public.win2000.security (More info?)

Thank you
the security policy we need to add the userid to:
>
> Generate Security Audits.
> Managing Auditing and Security Log.

This utility does not cover these policies..



"dw" wrote:

> We need to add a domain user to the locaL POLICY security of 300 servers via
> an automated script or such????
>
>
> security policy we need to add the userid to:
>
> Generate Security Audits.
> Managing Auditing and Security Log.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Ntrights works fine in W2K also and is part of the Windows 2000 Resource Kit. The KB
link below shows that using it to set logon locally as an example. Test it out on a
few server to see if it does what you want. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;279664

"dw" <dw@discussions.microsoft.com> wrote in message
news:115301C8-BBCE-45F1-B532-13BD9C4C09A8@microsoft.com...
> Thank you
>
> but the links are for windows nt 4.0 and xp we need one for windows 2000
> the GPO is a good idea except when we tried this it locked up all the security
event logs access.
>
>
> "dw" wrote:
>
> > We need to add a domain user to the locaL POLICY security of 300 servers via
> > an automated script or such????
> >
> >
> > security policy we need to add the userid to:
> >
> > Generate Security Audits.
> > Managing Auditing and Security Log.
> >

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

The two in the list below should meet your needs using ntrights. --- Steve

SeAuditPrivilege: Generate security audits
SeSecurityPrivilege: Manage auditing and security log


"dw" <dw@discussions.microsoft.com> wrote in message
news:32BE9676-8CB4-44E0-802D-DBFDA97EEDDD@microsoft.com...
> Thank you
> the security policy we need to add the userid to:
> >
> > Generate Security Audits.
> > Managing Auditing and Security Log.
>
> This utility does not cover these policies..
>
>
>
> "dw" wrote:
>
> > We need to add a domain user to the locaL POLICY security of 300 servers via
> > an automated script or such????
> >
> >
> > security policy we need to add the userid to:
> >
> > Generate Security Audits.
> > Managing Auditing and Security Log.
> >

 

[dw]

Archived from groups: microsoft.public.win2000.security (More info?)

Thank You.



"Steven Umbach" wrote:

> The two in the list below should meet your needs using ntrights. --- Steve
>
> SeAuditPrivilege: Generate security audits
> SeSecurityPrivilege: Manage auditing and security log
>
>
> "dw" <dw@discussions.microsoft.com> wrote in message
> news:32BE9676-8CB4-44E0-802D-DBFDA97EEDDD@microsoft.com...
> > Thank you
> > the security policy we need to add the userid to:
> > >
> > > Generate Security Audits.
> > > Managing Auditing and Security Log.
> >
> > This utility does not cover these policies..
> >
> >
> >
> > "dw" wrote:
> >
> > > We need to add a domain user to the locaL POLICY security of 300 servers via
> > > an automated script or such????
> > >
> > >
> > > security policy we need to add the userid to:
> > >
> > > Generate Security Audits.
> > > Managing Auditing and Security Log.
> > >
>
>
>