SCCM 1906 - Local Computer Policy settings

Question

In SCCM 1906, is there a way to find out which computers have a Local Computer Policy set?

"Deny access to this computer from the network" is under Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

Normally "Guest" is the only account which is denied access through this policy.

Is there a way to discover computers which have other accounts listed in this policy?
Or discover computers which have a specific account listed in this policy?

Answer 1

Hi,

I'm afraid we can't get this list.

User Rights security settings are not registry keys. Security information is stored in templates (.inf files) or in the Secedit.sdb database.

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/security-policy-settings#security-settings-policies-and-group-policy

FYI: We could use the Domain Policy override the Local Policy.

---

If the response is helpful, please click "Accept Answer" and upvote it.