Add/Remove security privileges on domain via command line

hello

list domain security privileges can use "gpresult /z" command. example result of command below:

• add workstations domain
• adjust memory quotas process
• debug programs

how can add privilege "enable accounts trusted delegation" or remove secuirty privilege domain user via command line?

note: we have domain admins privileges. don't want add user domain admins group. want escalate his/her privileges.

note: i not interest in permissions gporead/gpoedit.  (for more read: "set-gppermissions" article )

regards

hi,

i agree setting via gpo. far know manage gpo using powershell not group policy settings, please use

get-command -module grouppolicy

to commands used manage group policy.

it seems set-gpregistryvalue command manage group policy settings:

the set-gpregistryvalue cmdlet configures registry-based policy setting under either computer configuration or user configuration in gpo. policy setting configures keys or values in registry on client computer when gpo applied.

can specify gpo name or guid, or can pipe gpo object cmdlet. can pipe policyregistrysetting object (for example, 1 returned get-gpregistryvalue) cmdlet.

for more details command:

http://technet.microsoft.com/en-us/library/ee461034.aspx

so suggest use gpo set it.

regards,

yan li

---

yan li

technet community support

Windows Server  >  Windows PowerShell