Solved

VB script to remove user logon as service right

Posted on 2014-04-04
7
748 Views
Last Modified: 2014-05-19
Hi Everybody,

I need to write a VBscript that will take remove service account from “Log on as a service” policy on the local computer.

I found a VB script which give user logon as service right but I need a VB script to remove user account from “Logon as a service” on local computer.

Thanks.

Szuromi
0
Comment
Question by:Szuromi
  • 3
  • 2
7 Comments
 
LVL 35

Expert Comment

by:Kimputer
ID: 39979392
Use the same script you found, except modify it to find the line with

SeServiceLogonRight =

After it is found, find either ",domain\user" and replace it with nothing or
after it is found, find either "domain\user," and replace it with nothing or
after it is found, find either "pcname\user," and replace it with nothing or
after it is found, find either ",pcname\user" and replace it with nothing or
after it is found, find either "user," and replace it with nothing or
after it is found, find either ",user" and replace it with nothing or (yes, let's try to be complete :) ), because you don't want the rest to be replaced, as mine says:

SeServiceLogonRight = *S-1-5-20,ASPNET

which would mess up a couple of things if I just empy the whole string to
SeServiceLogonRight =

(meaning no one will have the right)
0
 

Author Comment

by:Szuromi
ID: 40002560
Hi Wizard,


Here is the vb script from ...
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/bef48a92-6b59-481f-aab7-990ae2d4f31a/vbscript-to-give-user-logon-as-service-right?forum=ITCG

------------------------------------------------------
Username = <domain\username>  'modify with your username
Dim oShell
Set oShell = CreateObject ("WScript.Shell")
  oShell.Run "secedit /export /cfg config.inf", 0, true
  oShell.Run "secedit /import /cfg config.inf /db database.sdb", 0, true
FileName = "config.inf"
OrgStr = "SeServiceLogonRight ="
RepStr = "SeServiceLogonRight = " & Username & ","
Set inputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile("config.inf", 1,1,-1)
    strInputFile = inputFile.ReadAll
inputFile.Close
Set inputFile = Nothing
   
Set outputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile("config.inf",2,1,-1)
outputFile.Write (Replace(strInputFile,OrgStr,RepStr))
outputFile.Close
    Set outputFile = Nothing
   
oShell.Run "secedit /configure /db database.sdb /cfg config.inf",0,true
set oShell= Nothing

Set obj = CreateObject("Scripting.FileSystemObject")
obj.DeleteFile("config.inf")
obj.DeleteFile("database.sdb")

-----------------

I tried to change it as you recommended but it does not seem to work for me. Would you please let me know what am I missing?

Thanks.
0
 
LVL 35

Accepted Solution

by:
Kimputer earned 400 total points
ID: 40042017
This should be it:

Username = "domain\username"  'modify with your username

FileName = "config.inf"
Dim oShell 
Set oShell = CreateObject ("WScript.Shell")
oShell.Run "secedit /export /cfg " & Filename, 0, true 
oShell.Run "secedit /import /cfg config.inf /db database.sdb", 0, true

Set inputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile(Filename, 1,1,-1)
    strInputFile = inputFile.ReadAll
inputFile.Close
Set inputFile = Nothing

splitstring = split(strInputFile,vbcrlf)
for each line in splitstring
	if instr(line,"SeServiceLogonRight") >  0 then
		OrgStr =  line
	end if
next
RepStr = Replace(OrgStr,Username,"")
RepStr = Replace(RepStr," = ,"," = ")
RepStr = Replace(RepStr,",,",",")

Set outputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile(Filename,2,1,-1)
outputFile.Write (Replace(strInputFile,OrgStr,RepStr))
outputFile.Close
Set outputFile = Nothing
    
oShell.Run "secedit /configure /db database.sdb /cfg config.inf",0,true
set oShell= Nothing

Set obj = CreateObject("Scripting.FileSystemObject")
obj.DeleteFile("config.inf") 
obj.DeleteFile("database.sdb")

Open in new window

0
 
LVL 35

Expert Comment

by:Kimputer
ID: 40042079
Also, if using newer Windows, you don't have the correct rights when double clicking the vbs. So, run cmd in administrator mode, then use:
"cscript script.vbs"
0
 

Author Closing Comment

by:Szuromi
ID: 40075989
Thanks your help!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

In this tutorial I will show you how to make a simple HTML bar chart with the usage of WhizBase, If you want more information about WhizBase please read my previous articles at http://www.experts-exchange.com/ARTH_5123186.html (http://www.experts-ex…
Active Directory replication delay is the cause to many problems.  Here is a super easy script to force Active Directory replication to all sites with by using an elevated PowerShell command prompt, and a tool to verify your changes.
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to match and substitute tagged data using PHP regular expressions. Demonstrated on Windows 7, but also applies to other operating systems. Demonstrated technique applies to PHP (all versions) and Firefox, but very similar techniques will w…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now