批处理修改组策略限制用户更改系统时间

fastslz

1. 
   
2. :::: 限制用户更改系统时间 By FastSLZ 2009-6-1 CMD WinXP SP2 or WinXP SP3
   
3. @echo off&SetLocal EnableDelayedExpansion
   
4. set "SecPath=%WINDIR%\security\Database"
   
5. cd.>"%SecPath%\sec.cfg"
   
6. if not exist "%SecPath%\sec.bak" secedit /export /cfg "%SecPath%\sec.bak" /quiet
   
7. for /f "delims=" %%i in ('type "%SecPath%\sec.bak"') do (
   
8. set "var=%%i"
   
9. if "!var:~0,21!"=="SeSystemtimePrivilege" (>>"%SecPath%\sec.cfg" echo SeSystemtimePrivilege =) else >>"%SecPath%\sec.cfg" echo/!var!
   
10. )
    
11. secedit /configure /db "%SecPath%\sec.sdb" /cfg "%SecPath%\sec.cfg" /quiet
    
12. gpupdate /force >nul
    
13. echo 重启生效！&pause>nul

复制代码

其它本地安全策略可以参考此代码

1. 
   
2. @echo off
   
3. ::::还原系统时间可更改状态
   
4. secedit /configure /db "%SecPath%\sec.sdb" /cfg "%SecPath%\sec.bak" /quiet
   
5. gpupdate /force >nul
   
6. echo 重启生效！&pause>nul

复制代码