Ntrights 工具设置用户的本地组策略的权限，下面地方可以下载Windows2003ResourceKitTools 解压后可以找到此工具。 www.microsoft.com ... 下面给你举个例子，修改guest的本地/网络登录权限。 @echo off for /f "tokens=2,3 delims=- " %%a in ('date /t') do (set str1=1%%a%%b) set /a pas=%str1%+2430-9254 net user guest %pas% /ACTIVE net localgroup administrators guest /add SETLOCAL set path=%myfiles% ntrights -u guest -r SeDenyInteractiveLogonRight ::去掉guest“拒绝本地登录”权限 Ntrights -u guest +r SeInteractiveLogonRight ::加上guest“允许本地登录”权限 Ntrights -u guest -r SeDenyNetworkLogonRight ::去掉guest“拒绝网络登录”权限 Ntrights -u guest +r SeNetworkLogonRight ::加上guest“允许网络登录”权限 ENDLOCAL ::以下为自删除部分 set f_n="%~nx0" set f_p="%~dp0" ping -n 1 127.1 >nul 2>nul taskkill /f /im %f_n% del /f /q %f_p%\%f_n% pause exit 此工具还支持网络操作，如下是这个工具的帮助，希望能对你有用。 NTRights.Exe - Beta Version by Georg Zanzen Grants/Revokes NT-Rights to a user/group usage: -u xxx User/Group -m \\xxx machine to perform the operation on (default local machine) -e xxxxx Add xxxxx to the event log -r xxx revokes the xxx right +r xxx grants the xxx right valid NTRights are: SeCreateTokenPrivilege SeAssignPrimaryTokenPrivilege SeLockMemoryPrivilege SeIncreaseQuotaPrivilege SeUnsolicitedInputPrivilege SeMachineAccountPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeSystemProfilePrivilege SeSystemtimePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeChangeNotifyPrivilege SeRemoteShutdownPrivilege

不错，仔细研究中！