[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

A script that Changes Local policy settings

Posted on 2009-07-15
4
Medium Priority
?
458 Views
Last Modified: 2013-11-09
A script that Changes Local policy settings
I need to disjoin some computers from the Domain,
I did disjoin some, but noticed by default after they are disjoined I can not browse to them using \\Ipaddress\C$.
The issue was when they get disjoined from the domain to workgroup, the Settings in Local policy "Network access: Sharing and security model for local accounts" switches to "Guest only: Local users authenticate as Guest."

is there any script to run agains workstations that can reset this policy to "Classic: Local users authenticate as themselves." ???

Because when It's set to "Classic: Local users authenticate as themselves.", I can browse to the computer I can do other things too, lie rejoining it to the domain through a script from a remote machine.

Thanks
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 66

Expert Comment

by:johnb6767
ID: 24866740
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Try that one.....
0
 

Author Comment

by:jskfan
ID: 24910618
lhow am I gonna run it against remote computers.
If I use PSEXEC tool , I am not sure it's gonna work since the taget computer will need credentials
and if the policy is "Guest only: Local users authenticate as Guest." on the remote computer then it will not accept the credentials that I sued to run PSEXEC.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 2000 total points
ID: 24911590
Using explicit credentials might...... Is the admin psw the same across the board?
psexec @C:\PCNames.txt -u Administrator -p P@$$W0rD reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\" /v forceguest /t reg_dword /v 0x0
Did it work on the local machine as a test?
0
 

Author Closing Comment

by:jskfan
ID: 31603759
I will try it sometime and see if it works..
Thanks
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question