Solved

A script that Changes Local policy settings

Posted on 2009-07-15
4
454 Views
Last Modified: 2013-11-09
A script that Changes Local policy settings
I need to disjoin some computers from the Domain,
I did disjoin some, but noticed by default after they are disjoined I can not browse to them using \\Ipaddress\C$.
The issue was when they get disjoined from the domain to workgroup, the Settings in Local policy "Network access: Sharing and security model for local accounts" switches to "Guest only: Local users authenticate as Guest."

is there any script to run agains workstations that can reset this policy to "Classic: Local users authenticate as themselves." ???

Because when It's set to "Classic: Local users authenticate as themselves.", I can browse to the computer I can do other things too, lie rejoining it to the domain through a script from a remote machine.

Thanks
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 66

Expert Comment

by:johnb6767
ID: 24866740
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Try that one.....
0
 

Author Comment

by:jskfan
ID: 24910618
lhow am I gonna run it against remote computers.
If I use PSEXEC tool , I am not sure it's gonna work since the taget computer will need credentials
and if the policy is "Guest only: Local users authenticate as Guest." on the remote computer then it will not accept the credentials that I sued to run PSEXEC.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 24911590
Using explicit credentials might...... Is the admin psw the same across the board?
psexec @C:\PCNames.txt -u Administrator -p P@$$W0rD reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Did it work on the local machine as a test?
0
 

Author Closing Comment

by:jskfan
ID: 31603759
I will try it sometime and see if it works..
Thanks
0

Featured Post

Monthly Recap

May was a big month for new releases from Linux Academy! Take a look at what our team built recently in our blog. You can access the newest releases from our blog.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question