Preston Posted March 29, 2006 Posted March 29, 2006 Ok contained here is alog of a script which i think runs everytime a user logs off our system.... Make a local copy of \\morayschools.gov.uk\sysvol\morayschools.gov.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf. GPLinkDomain GPO_INFO_FLAG_BACKGROUND ) Process GP template gpt00000.dom. ------------------------------------------- 14 May 2003 14:08:31 Copy undo values to the merged policy. ----Configuration engine was initialized successfully.---- ----Reading Configuration Template info... ----Configure User Rights... Configure S-1-5-21-2086541245-1825578934-1538882281-21482. add SeMachineAccountPrivilege. User Rights configuration was completed successfully. ----Configure File Security... Configure c:\windows\system32\moray. File Security configuration was completed successfully. ----Configure Security Policy... 0 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. 42 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. Configure password information. 0 Undo value for group policy setting was saved. 0 Undo value for group policy setting was saved. Configure account force logoff information. System Access configuration was completed successfully. Audit/Log configuration was completed successfully. Configure machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername. Mismatch - machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername. Undo value for group policy setting was saved. Configuration of Registry Values was completed successfully. ----Configure available attachment engines... Configuration of attachment engines was completed successfully. ----Un-initialize configuration engine... i'm not sure if this helps but this is a file stored in group policies so is applied to every machine on log off. Bleow is the actual .inf file which runs... [unicode] Unicode=yes [system Access] MinimumPasswordAge = 0 MaximumPasswordAge = -1 MinimumPasswordLength = 0 PasswordComplexity = 0 PasswordHistorySize = 0 LockoutBadCount = 0 RequireLogonToChangePassword = 0 ForceLogoffWhenHourExpire = 0 ClearTextPassword = 0 [Kerberos Policy] MaxTicketAge = 10 MaxRenewAge = 7 MaxServiceAge = 600 MaxClockSkew = 5 TicketValidateClient = 1 [Version] signature="$CHICAGO$" Revision=1 [Registry Values] MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName=4,1 [File Security] "%SystemDrive%\windows\system32\moray",0,"D:PAR(A;OICI;FA;;;LA)(A;OICI;FA;;;BA)(A;OICI;FA;;;DA)(A;OICI;0x1200a9;;;DU)(A;OICI;0x1200a9;;;WD)" [Privilege Rights] SeMachineAccountPrivilege = joiner SeSystemtimePrivilege = *S-1-5-21-2086541245-1825578934-1538882281-512,*S-1-5-32-544
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now