Ntrights.exe Windows 2008 R2 Resource Kit Tool? Does it exist or is there something similar I can use?

Question

I am running Windows Server 2008 R2 Standard as a DC
I am trying to add users/groups to the following local policies through a GPO, however I need to script it out using something similar to ntrights.exe. I do not want to do it through the GUI because this is going to be a re-occurring process.
Below are the policies I am trying to configure via some kind of command prompt. I do not think I can do this with PowerShell 2.0 even with the import-module grouppolicy cmdlets.
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Force shutdown from a remote system
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Shut down the system
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Change the system time
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow logon through Remote Desktop Services
Would it be safe to copy the Windows Server 2003 ntrights.exe resource kit tool and try it on Windows Server 2008 R2? I am working on a virtual test lab environment so I can actually take a snapshot before hand but wanted your expert thoughts on it first.
Thank you in advance.

Answer 1

I found the solution.....You can actually use "quoted" host names in the templates instead of the SIDs. Make sure that for Domain User Accounts you specify the Domain prefix. For Local User accounts you can just specify the local user name.
The filename of the template that I made is LOCAL_SEC_TEMPLATE.inf
Here's what's inside that LOCAL_SEC_TEMPLATE.inf template:
[Unicode]
Unicode=yes
[Registry Values]
[Privilege Rights]
SeInteractiveLogonRight = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins"
SeDebugPrivilege = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins"
SeRemoteShutdownPrivilege = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins"
SeSystemtimePrivilege = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins","LOCAL SERVICE"
SeShutdownPrivilege = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins"
SeRemoteInteractiveLogonRight = "Administrators","XXDIGIHD\DigiOps","XXDIGIHD\Domain Admins","Remote Desktop Users"
[Version]
signature="$CHICAGO$"
Revision=1
[Profile Description]
Description=Local Security Template
Here's how I applied the template to the Local Security Policy: (You can use PowerShell or the regular command prompt)
SECEDIT /configure /db secedit.sdb /cfg "c:\LOCAL_SEC_TEMPLATE.inf"
Here's the link on using SECEDIT >> http://www.appdeploy.com/tips/detail.asp?id=23
Thanks for your help Gunter, this issue is solved.