Vista Home Premium, Local Security Policy

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

Visit: http://www.lockergnome.com/nexus/win...in-vista/feed/

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------Â*-----


"SIS" <SIS@discussions.microsoft.com> wrote in message news:1BD2861A-DC08-44A9-9421-2BCDE16F5D91@microsoft.com...
Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

Hi Carey,

Thanks for your prompt response.

I have already been through the link you have provided. Actually, it doesn't
state how can I change the settings for that particular parameter 'Logon as a
Batch Job'.

Can you pls give me some details, how can I set that.

Windows Vista Home Users:

1. Press the Windows key, type regedit and press Enter. Browse down to this registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
2. You should see a key called PromptOnSecureDesktop. Double-click this and change the value to 0 (zero)

To assign the "Log on as a batch job" user right to the Performance Log Users group:

1. Click Start, click in the Search box, type secpol.msc, and press ENTER.
The Local Security Policy snap-in will open in Microsoft Management Console.
2. In the navigation pane, expand Local Policies and click User Rights Assignment.
3. In the console pane, right-click Log on as a batch job and click Properties.
4. In the Properties page, click Add User or Group.
5. In the Select Users or Groups dialog box, click Object Types.
Select Groups in the Object Types dialog box and click OK.
6. Type Performance Log Users in the Select Users or Groups dialog box and then click OK.
7. In the properties page, click OK.

--
Carey Frisch
Microsoft MVP
Windows - Shell/User

---------------------------------------------------------------------------Â*-----

"SIS" wrote:

Dear Sir,

How can access the Local Security Policy in Windows Vista Home Premium,
which is available under Control Panel -> Administrative Tools -> Local
Security Policy in Windows XP.

I have searched on the discussion group regarding this and found out that
this has not been provided in the Vista Home Premium Edition. I woild like to
know how else then I can set a user for 'Logon as a Batch Job', which I must
setup for some of the features of my another software to work for me.

Pls let me know.

Thanks & Regards
SIS

SIS wrote:
> Dear Sir,
>
> How can access the Local Security Policy in Windows Vista Home Premium,
> which is available under Control Panel -> Administrative Tools -> Local
> Security Policy in Windows XP.
>
> I have searched on the discussion group regarding this and found out that
> this has not been provided in the Vista Home Premium Edition. I woild like to
> know how else then I can set a user for 'Logon as a Batch Job', which I must
> setup for some of the features of my another software to work for me.
>
> Pls let me know.
>
> Thanks & Regards
> SIS

Hello,

You can use the NTrights.exe command-line tool, available as a free
download from Microsoft as part of the Windows Server 2003 Resource Kit
Tools:

http://www.microsoft.com/downloads/d...E-B18C4790CFFD

You will need to run the tool from an elevated command prompt
(right-click command prompt, click Run As Administrator).

--
-JB
Microsoft MVP - Windows Shell/User
Windows Vista Support FAQ - http://www.jimmah.com/vista/

Dear Carey,

Sorry for the delay in response.
I tried the step-by-step process as described by you. But I am unable to
find the secpol.msc. After setting the "PromptOnSecureDesktop" to 0, I tried
running secpol.msc, it say cannot find the file specified.

Where can I find that file. What is the other possible way.

Hi Jimmy,

But I could not find any option for setting the value for 'Log on as a Batch
Job', in NTrights.exe, which actually I need to set.

Pls respond.

SIS wrote:
> Hi Jimmy,
>
> But I could not find any option for setting the value for 'Log on as a Batch
> Job', in NTrights.exe, which actually I need to set.
>
> Pls respond.
>
> Thanks
>

Hello,

You can do it with NTrights, but the correct switch is not listed in the
help output for some reason. It is the SeBatchLogonRight option (case
sensitive).

e.g.: ntrights -u LOCAL\jimmy +r SeBatchLogonRight

Make sure you run the command from an elevated command prompt
(right-click, run as administrator).

See: http://support.microsoft.com/kb/279664

- JB

Hi Jimmy,

Thanks for your response. I tried the way as described by you, but I
received the following error:

C:\Windows\system32>ntrights -u LOCAL\administrator +r SeBatchLogonRight
Granting SeBatchLogonRight to LOCAL\administrator ... failed
(GetAccountSid(L
OCAL\administrator)=1332

What could be the reason.

I am having a similar problem to the one SIS described, except that I need to
be able to modify the "LAN Manager authentication level" security policy. I
need to do this to be able to map a network drive on a Novell file server
cluster.

Any help would be apreciated.

Hi All,

Pls any updates on this.

Aloha SIS,

Try Start -> Run -> gpedit.msc

In theory, that should open the Group Policy Editor. Once there you should
find the "Log on as a batch job" policy under Computer Configuration ->
Windows Settings -> Security Settings -> Local Policies -> User Rights
Assignment.

I found the reference GPEdit.msc in one of my reference books, but I haven't
been able to try this yet in a Vista Home Premium environment. Let me me
know how it works for you.

[GarySF]

I believe I hit on a solution to the LSP issues for Vista Home Premium Users. Using MS's Security Policy Settings spreadsheet for Vista, I was able to determine which Registry Key corresponded to the Local Security Policy setting I needed to change. I then looked up that key using REGEDIT, reset it manually and it worked like a charm.

In my case I was looking to reset the LAN Manager authentication level in order to enable username/password for shared folder access between WinXP, Vista and Win7 machines. I set up a WinXPPro (SP3 w/ all .net updates installed) with 2 4TB spanned drives for video file sharing in my home network. But my Vista Home Premium 64 (SP1) and other three Win7 Pro (SP1) machines kept popping up asking for a username/password before they would open the XP machine from the network, or whenever I attempted to mad a drive. I activated the guest account and added a password, but it kept coming back bad password.

Surfing this AM, I saw suggestion to set the LAN Manager authentication level to "Send LM and NTLM Responses" to enable post-XP to network w/ XP. That fixed the Win7Pro machines instantly, but since Vista Home Premium doesn't have a Local Security Policy function in Admin Tools or the Control Panel, I was stuck till I found the MS listing for the Registry keys that match the LSP functions.

The only challenge left was figuring out what numerical value corresponded to the setting I wanted (there are 6 possible settings shown for LAN Manager authentication level in Win7 Pro's LSP). The MS spreadsheet doesn't detail the options for each setting. So I looked up the value for the corresponding key in my Win7 machine's registry (0) and reset my Vista key to match. Presto! All my machines can use the guest account to hit all my networked drives again.

Sorry, I pasted in the wrong link for the MS Security Policy Settings document in my previous post. It should have linked to http://www.microsoft.com/download/en...ng=en&id=25250