A script that Changes Local policy settings

Posted on 2009-07-15
Medium Priority
Last Modified: 2013-11-09
A script that Changes Local policy settings
I need to disjoin some computers from the Domain,
I did disjoin some, but noticed by default after they are disjoined I can not browse to them using \\Ipaddress\C$.
The issue was when they get disjoined from the domain to workgroup, the Settings in Local policy "Network access: Sharing and security model for local accounts" switches to "Guest only: Local users authenticate as Guest."

is there any script to run agains workstations that can reset this policy to "Classic: Local users authenticate as themselves." ???

Because when It's set to "Classic: Local users authenticate as themselves.", I can browse to the computer I can do other things too, lie rejoining it to the domain through a script from a remote machine.

Question by:jskfan
  • 2
  • 2
LVL 66

Expert Comment

ID: 24866740
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Try that one.....

Author Comment

ID: 24910618
lhow am I gonna run it against remote computers.
If I use PSEXEC tool , I am not sure it's gonna work since the taget computer will need credentials
and if the policy is "Guest only: Local users authenticate as Guest." on the remote computer then it will not accept the credentials that I sued to run PSEXEC.
LVL 66

Accepted Solution

johnb6767 earned 2000 total points
ID: 24911590
Using explicit credentials might...... Is the admin psw the same across the board?
psexec @C:\PCNames.txt -u Administrator -p P@$$W0rD reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Did it work on the local machine as a test?

Author Closing Comment

ID: 31603759
I will try it sometime and see if it works..

Featured Post

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In a question here at Experts Exchange, a member was looking for "a little app that would allow sound to be turned OFF and ON by simply clicking on an icon in the system tray". This article shows how to achieve that, as well as providing the same OF…
The Windows Firewall provides an important layer of protection and a rich interface to configure it. Unfortunately, it lacks item level filtering. This article details my process of implementing firewall-as-code to reduce GPO bloat.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question