Solved

VB script to remove user logon as service right

Posted on 2014-04-04
7
793 Views
Last Modified: 2014-05-19
Hi Everybody,

I need to write a VBscript that will take remove service account from “Log on as a service” policy on the local computer.

I found a VB script which give user logon as service right but I need a VB script to remove user account from “Logon as a service” on local computer.

Thanks.

Szuromi
0
Comment
Question by:Szuromi
  • 3
  • 2
7 Comments
 
LVL 35

Expert Comment

by:Kimputer
ID: 39979392
Use the same script you found, except modify it to find the line with

SeServiceLogonRight =

After it is found, find either ",domain\user" and replace it with nothing or
after it is found, find either "domain\user," and replace it with nothing or
after it is found, find either "pcname\user," and replace it with nothing or
after it is found, find either ",pcname\user" and replace it with nothing or
after it is found, find either "user," and replace it with nothing or
after it is found, find either ",user" and replace it with nothing or (yes, let's try to be complete :) ), because you don't want the rest to be replaced, as mine says:

SeServiceLogonRight = *S-1-5-20,ASPNET

which would mess up a couple of things if I just empy the whole string to
SeServiceLogonRight =

(meaning no one will have the right)
0
 

Author Comment

by:Szuromi
ID: 40002560
Hi Wizard,


Here is the vb script from ...
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/bef48a92-6b59-481f-aab7-990ae2d4f31a/vbscript-to-give-user-logon-as-service-right?forum=ITCG

------------------------------------------------------
Username = <domain\username>  'modify with your username
Dim oShell
Set oShell = CreateObject ("WScript.Shell")
  oShell.Run "secedit /export /cfg config.inf", 0, true
  oShell.Run "secedit /import /cfg config.inf /db database.sdb", 0, true
FileName = "config.inf"
OrgStr = "SeServiceLogonRight ="
RepStr = "SeServiceLogonRight = " & Username & ","
Set inputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile("config.inf", 1,1,-1)
    strInputFile = inputFile.ReadAll
inputFile.Close
Set inputFile = Nothing
   
Set outputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile("config.inf",2,1,-1)
outputFile.Write (Replace(strInputFile,OrgStr,RepStr))
outputFile.Close
    Set outputFile = Nothing
   
oShell.Run "secedit /configure /db database.sdb /cfg config.inf",0,true
set oShell= Nothing

Set obj = CreateObject("Scripting.FileSystemObject")
obj.DeleteFile("config.inf")
obj.DeleteFile("database.sdb")

-----------------

I tried to change it as you recommended but it does not seem to work for me. Would you please let me know what am I missing?

Thanks.
0
 
LVL 35

Accepted Solution

by:
Kimputer earned 400 total points
ID: 40042017
This should be it:

Username = "domain\username"  'modify with your username

FileName = "config.inf"
Dim oShell 
Set oShell = CreateObject ("WScript.Shell")
oShell.Run "secedit /export /cfg " & Filename, 0, true 
oShell.Run "secedit /import /cfg config.inf /db database.sdb", 0, true

Set inputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile(Filename, 1,1,-1)
    strInputFile = inputFile.ReadAll
inputFile.Close
Set inputFile = Nothing

splitstring = split(strInputFile,vbcrlf)
for each line in splitstring
	if instr(line,"SeServiceLogonRight") >  0 then
		OrgStr =  line
	end if
next
RepStr = Replace(OrgStr,Username,"")
RepStr = Replace(RepStr," = ,"," = ")
RepStr = Replace(RepStr,",,",",")

Set outputFile = CreateObject("Scripting.FileSystemObject").OpenTextFile(Filename,2,1,-1)
outputFile.Write (Replace(strInputFile,OrgStr,RepStr))
outputFile.Close
Set outputFile = Nothing
    
oShell.Run "secedit /configure /db database.sdb /cfg config.inf",0,true
set oShell= Nothing

Set obj = CreateObject("Scripting.FileSystemObject")
obj.DeleteFile("config.inf") 
obj.DeleteFile("database.sdb")

Open in new window

0
 
LVL 35

Expert Comment

by:Kimputer
ID: 40042079
Also, if using newer Windows, you don't have the correct rights when double clicking the vbs. So, run cmd in administrator mode, then use:
"cscript script.vbs"
0
 

Author Closing Comment

by:Szuromi
ID: 40075989
Thanks your help!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Over the years I have built up my own little library of code snippets that I refer to when programming or writing a script.  Many of these have come from the web or adaptations from snippets I find on the Web.  Periodically I add to them when I come…
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
Learn the basics of lists in Python. Lists, as their name suggests, are a means for ordering and storing values. : Lists are declared using brackets; for example: t = [1, 2, 3]: Lists may contain a mix of data types; for example: t = ['string', 1, T…
Learn the basics of while and for loops in Python.  while loops are used for testing while, or until, a condition is met: The structure of a while loop is as follows:     while <condition>:         do something         repeate: The break statement m…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now