On a Windows 7 machines if you do start\run gpedit.msc you of course get to your local group polices. Can WinBatch manipulate and turn on/off settings within gpedit.msc? If so what command(s) do that?
The following applies to Windows 7 too:
http://techsupt.winbatch.com/webcgi/webbatch.exe?techsupt/nftechsupt.web+WinBatch/How~To+Modify~Local~Group~Policy.txt (http://techsupt.winbatch.com/webcgi/webbatch.exe?techsupt/nftechsupt.web+WinBatch/How~To+Modify~Local~Group~Policy.txt)
Then there is always running the secedit utility from one of the Run* function or ShellExecute:
https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_secedittopnode.mspx?mfr=true (https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_secedittopnode.mspx?mfr=true)
thanks but that does not fix the issue. I can't find the corosponding GPO setting on the domain policies, it only seems to be in the local policy, that is why I wanted to know if WinBatch could manipulate the local policies.
You need to review the article pointed to by the first link again. The 'local policy' is stored in the registry of the targeted system. Changing the local policy involves changing the registry and that is what that article demonstrates.
A brief discussion of local vs domain policy can be found here:
http://technet.microsoft.com/en-us/library/cc775702(v=ws.10).aspx (http://technet.microsoft.com/en-us/library/cc775702(v=ws.10).aspx)