Vista Home Premium, Local Security Policy

  • Thread starter Thread starter SIS
  • Start date Start date
S

SIS

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS
 
Visit: http://www.lockergnome.com/nexus/windows/2007/02/27/find-the-local-security-settings-in-vista/feed/

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------­-----


"SIS" <SIS@discussions.microsoft.com> wrote in message news:1BD2861A-DC08-44A9-9421-2BCDE16F5D91@microsoft.com...
Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS
 
Hi Carey,

Thanks for your prompt response.

I have already been through the link you have provided. Actually, it doesn't
state how can I change the settings for that particular parameter 'Logon as a
Batch Job'.

Can you pls give me some details, how can I set that.

Thanks & Regards
SIS

"Carey Frisch [MVP]" wrote:

> Visit: http://www.lockergnome.com/nexus/windows/2007/02/27/find-the-local-security-settings-in-vista/feed/
>
> --
> Carey Frisch
> Microsoft MVP
> Windows - Shell/User
>
> ---------------------------------------------------------------------------­-----
>
>
> "SIS" <SIS@discussions.microsoft.com> wrote in message news:1BD2861A-DC08-44A9-9421-2BCDE16F5D91@microsoft.com...
> Dear Sir,
>
> How can access the Local Security Policy in Windows Vista Home Premium,
> which is available under Control Panel -> Administrative Tools -> Local
> Security Policy in Windows XP.
>
> I have searched on the discussion group regarding this and found out that
> this has not been provided in the Vista Home Premium Edition. I woild like to
> know how else then I can set a user for 'Logon as a Batch Job', which I must
> setup for some of the features of my another software to work for me.
>
> Pls let me know.
>
> Thanks & Regards
> SIS
>
 
Windows Vista Home Users:

1. Press the Windows key, type regedit and press Enter. Browse down to this registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
2. You should see a key called PromptOnSecureDesktop. Double-click this and change the value to 0 (zero)

To assign the "Log on as a batch job" user right to the Performance Log Users group:

1. Click Start, click in the Search box, type secpol.msc, and press ENTER.
The Local Security Policy snap-in will open in Microsoft Management Console.
2. In the navigation pane, expand Local Policies and click User Rights Assignment.
3. In the console pane, right-click Log on as a batch job and click Properties.
4. In the Properties page, click Add User or Group.
5. In the Select Users or Groups dialog box, click Object Types.
Select Groups in the Object Types dialog box and click OK.
6. Type Performance Log Users in the Select Users or Groups dialog box and then click OK.
7. In the properties page, click OK.

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------­-----

"SIS" wrote:

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS
 
SIS wrote:
> Dear Sir,
>
> How can access the Local Security Policy in Windows Vista Home Premium,
> which is available under Control Panel -> Administrative Tools -> Local
> Security Policy in Windows XP.
>
> I have searched on the discussion group regarding this and found out that
> this has not been provided in the Vista Home Premium Edition. I woild like to
> know how else then I can set a user for 'Logon as a Batch Job', which I must
> setup for some of the features of my another software to work for me.
>
> Pls let me know.
>
> Thanks & Regards
> SIS

Hello,

You can use the NTrights.exe command-line tool, available as a free
download from Microsoft as part of the Windows Server 2003 Resource Kit
Tools:

http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD

You will need to run the tool from an elevated command prompt
(right-click command prompt, click Run As Administrator).

--
-JB
Microsoft MVP - Windows Shell/User
Windows Vista Support FAQ - http://www.jimmah.com/vista/
 
Dear Carey,

Sorry for the delay in response.
I tried the step-by-step process as described by you. But I am unable to
find the secpol.msc. After setting the "PromptOnSecureDesktop" to 0, I tried
running secpol.msc, it say cannot find the file specified.

Where can I find that file. What is the other possible way.

Thanks
SIS

"Carey Frisch [MVP]" wrote:

> Windows Vista Home Users:
>
> 1. Press the Windows key, type regedit and press Enter. Browse down to this registry key:
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
> 2. You should see a key called PromptOnSecureDesktop. Double-click this and change the value to 0 (zero)
>
> To assign the "Log on as a batch job" user right to the Performance Log Users group:
>
> 1. Click Start, click in the Search box, type secpol.msc, and press ENTER.
> The Local Security Policy snap-in will open in Microsoft Management Console.
> 2. In the navigation pane, expand Local Policies and click User Rights Assignment.
> 3. In the console pane, right-click Log on as a batch job and click Properties.
> 4. In the Properties page, click Add User or Group.
> 5. In the Select Users or Groups dialog box, click Object Types.
> Select Groups in the Object Types dialog box and click OK.
> 6. Type Performance Log Users in the Select Users or Groups dialog box and then click OK.
> 7. In the properties page, click OK.
>
> --
> Carey Frisch
> Microsoft MVP
> Windows - Shell/User
>
> ---------------------------------------------------------------------------­-----
>
> "SIS" wrote:
>
> Dear Sir,
>
> How can access the Local Security Policy in Windows Vista Home Premium,
> which is available under Control Panel -> Administrative Tools -> Local
> Security Policy in Windows XP.
>
> I have searched on the discussion group regarding this and found out that
> this has not been provided in the Vista Home Premium Edition. I woild like to
> know how else then I can set a user for 'Logon as a Batch Job', which I must
> setup for some of the features of my another software to work for me.
>
> Pls let me know.
>
> Thanks & Regards
> SIS
>
 
Hi Jimmy,

But I could not find any option for setting the value for 'Log on as a Batch
Job', in NTrights.exe, which actually I need to set.

Pls respond.

Thanks

"Jimmy Brush" wrote:

> SIS wrote:
> > Dear Sir,
> >
> > How can access the Local Security Policy in Windows Vista Home Premium,
> > which is available under Control Panel -> Administrative Tools -> Local
> > Security Policy in Windows XP.
> >
> > I have searched on the discussion group regarding this and found out that
> > this has not been provided in the Vista Home Premium Edition. I woild like to
> > know how else then I can set a user for 'Logon as a Batch Job', which I must
> > setup for some of the features of my another software to work for me.
> >
> > Pls let me know.
> >
> > Thanks & Regards
> > SIS
>
> Hello,
>
> You can use the NTrights.exe command-line tool, available as a free
> download from Microsoft as part of the Windows Server 2003 Resource Kit
> Tools:
>
> http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD
>
> You will need to run the tool from an elevated command prompt
> (right-click command prompt, click Run As Administrator).
>
> --
> -JB
> Microsoft MVP - Windows Shell/User
> Windows Vista Support FAQ - http://www.jimmah.com/vista/
>
 
SIS wrote:
> Hi Jimmy,
>
> But I could not find any option for setting the value for 'Log on as a Batch
> Job', in NTrights.exe, which actually I need to set.
>
> Pls respond.
>
> Thanks
>

Hello,

You can do it with NTrights, but the correct switch is not listed in the
help output for some reason. It is the SeBatchLogonRight option (case
sensitive).

e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight

Make sure you run the command from an elevated command prompt
(right-click, run as administrator).

See: http://support.microsoft.com/kb/279664

- JB
 
Hi Jimmy,

Thanks for your response. I tried the way as described by you, but I
received the following error:

C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
Granting SeBatchLogonRight to LOCAL\administrator ... failed
(GetAccountSid(L
OCAL\administrator)=1332

What could be the reason.

Thanks & Regards
SIS

"Jimmy Brush" wrote:

> SIS wrote:
> > Hi Jimmy,
> >
> > But I could not find any option for setting the value for 'Log on as a Batch
> > Job', in NTrights.exe, which actually I need to set.
> >
> > Pls respond.
> >
> > Thanks
> >
>
> Hello,
>
> You can do it with NTrights, but the correct switch is not listed in the
> help output for some reason. It is the SeBatchLogonRight option (case
> sensitive).
>
> e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight
>
> Make sure you run the command from an elevated command prompt
> (right-click, run as administrator).
>
> See: http://support.microsoft.com/kb/279664
>
> - JB
>
 
I am having a similar problem to the one SIS described, except that I need to
be able to modify the "LAN Manager authentication level" security policy. I
need to do this to be able to map a network drive on a Novell file server
cluster.

Any help would be apreciated.

Thanks...

"SIS" wrote:

> Dear Sir,
>
> How can access the Local Security Policy in Windows Vista Home Premium,
> which is available under Control Panel -> Administrative Tools -> Local
> Security Policy in Windows XP.
>
> I have searched on the discussion group regarding this and found out that
> this has not been provided in the Vista Home Premium Edition. I woild like to
> know how else then I can set a user for 'Logon as a Batch Job', which I must
> setup for some of the features of my another software to work for me.
>
> Pls let me know.
>
> Thanks & Regards
> SIS
 
Hi All,

Pls any updates on this.

Regards
SIS

"SIS" wrote:

> Hi Jimmy,
>
> Thanks for your response. I tried the way as described by you, but I
> received the following error:
>
> C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
> Granting SeBatchLogonRight to LOCAL\administrator ... failed
> (GetAccountSid(L
> OCAL\administrator)=1332
>
> What could be the reason.
>
> Thanks & Regards
> SIS
>
> "Jimmy Brush" wrote:
>
> > SIS wrote:
> > > Hi Jimmy,
> > >
> > > But I could not find any option for setting the value for 'Log on as a Batch
> > > Job', in NTrights.exe, which actually I need to set.
> > >
> > > Pls respond.
> > >
> > > Thanks
> > >
> >
> > Hello,
> >
> > You can do it with NTrights, but the correct switch is not listed in the
> > help output for some reason. It is the SeBatchLogonRight option (case
> > sensitive).
> >
> > e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight
> >
> > Make sure you run the command from an elevated command prompt
> > (right-click, run as administrator).
> >
> > See: http://support.microsoft.com/kb/279664
> >
> > - JB
> >
 
Aloha SIS,

Try Start -> Run -> gpedit.msc

In theory, that should open the Group Policy Editor. Once there you should
find the "Log on as a batch job" policy under Computer Configuration ->
Windows Settings -> Security Settings -> Local Policies -> User Rights
Assignment.

I found the reference GPEdit.msc in one of my reference books, but I haven't
been able to try this yet in a Vista Home Premium environment. Let me me
know how it works for you.

Good Luck.

"SIS" wrote:

> Hi All,
>
> Pls any updates on this.
>
> Regards
> SIS
>
> "SIS" wrote:
>
> > Hi Jimmy,
> >
> > Thanks for your response. I tried the way as described by you, but I
> > received the following error:
> >
> > C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
> > Granting SeBatchLogonRight to LOCAL\administrator ... failed
> > (GetAccountSid(L
> > OCAL\administrator)=1332
> >
> > What could be the reason.
> >
> > Thanks & Regards
> > SIS
> >
> > "Jimmy Brush" wrote:
> >
> > > SIS wrote:
> > > > Hi Jimmy,
> > > >
> > > > But I could not find any option for setting the value for 'Log on as a Batch
> > > > Job', in NTrights.exe, which actually I need to set.
> > > >
> > > > Pls respond.
> > > >
> > > > Thanks
> > > >
> > >
> > > Hello,
> > >
> > > You can do it with NTrights, but the correct switch is not listed in the
> > > help output for some reason. It is the SeBatchLogonRight option (case
> > > sensitive).
> > >
> > > e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight
> > >
> > > Make sure you run the command from an elevated command prompt
> > > (right-click, run as administrator).
> > >
> > > See: http://support.microsoft.com/kb/279664
> > >
> > > - JB
> > >
 
Back
Top