batch file to change local permissions

[DarkTXKnight]

Hello, as part of a security remediation project at work, we have to change the group permissions on 200 windows 2000 and 2003 servers. I remember that once upon a time there was a command batch I coud run to do this. Can anyone help me do the following:

run commands to remove domain group A from local machines
remove local group B from local machines
add domain group C to local machines
rename local group D on the local machine, pause for confrmaion and then a timed shutdown\reboot of the machine.

Id like some guidance in getting started.

 

[Allanv]

The command you will need is net localgroup.

so:

net localgroup groupb / delete
net localgroup administrators groupc /add

pause

shutdown -r -t 15

--------------------------------------------------------

I am not sure about renaming a group

Hope this points you in the right direction

Regards

Allanv

Edited because the command shutdown -t -t 15 should have been shutdown -r -t 15

 

[DarkTXKnight]

Man this is a great start!! I will test this out today, I knew it was a net group but couldnt remember exactly what Thank you.

Anyone else that can chime in about changing the group or username via command line please do!

 

[Nothinman]

I'm not sure if xcacls works via UNC paths but that might be something to look at. Also, if you're going to be doing a lot of Windows scripting you'll probalby want to start looking at VBScript since it's much more capable than the crap that is cmd.

 

[DarkTXKnight]

Actually Ive been researching how to do this in vbscript as well since Id like to uninstall some things with this script as well. Anyone know of some good scripting resources?