I have read very similar questions to mine, but not exactly the same as mine. I am trying to remove the group USERS from the policy "Deny Logon through Remote Desktop Services" in Win 7 Local Security Policy. I am trying to do it on hundreds of systems on my network, which is a workgroup, not a domain. My login account is local admin on every system. Have tried "ntrights.exe -m \\"computername" -u users -r SeDenyInteractiveLogonRight" but get ***Error*** OpenPolicy -1073610745 . When I run NTRights /?, I get the list of valid NTRights commands; none of which is SeDenyInteractiveLogonRight. Is it not available in WIN 7? Is there another way to accomplish this? Thanks.

Hi, Ntrights.exe is a tool of Windows 2003 Resource Toolkit. I am not sure it totally works under Windows 7. Anyway, you could directly modify this policy by Gpedit.msc. This policy resides in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment. Juke Chou TechNet Community Support

Hi, You can still make this change. But I think it is a little bit complicated. First, you need to make a change on a computer. Then, copy out the file registry.pol under %windir%\System32\GroupPolicy\Machine. Finally, you could utilize script to put it in the same location of target computers. Juke Chou TechNet Community Support

Hi, Ntrights.exe is a tool of Windows 2003 Resource Toolkit. I am not sure it totally works under Windows 7. Anyway, you could directly modify this policy by Gpedit.msc. This policy resides in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment. Juke Chou TechNet Community Support

Thanks. However, how do I make this change on a workgroup computer's policy remotely? We are not in a domain environment.

Hi, You can still make this change. But I think it is a little bit complicated. First, you need to make a change on a computer. Then, copy out the file registry.pol under %windir%\System32\GroupPolicy\Machine. Finally, you could utilize script to put it in the same location of target computers. Juke Chou TechNet Community Support