如何通过编程查看Windows安全选项？已掌握密码及审核策略操作

Hey there! Since you're already comfortable using NetUserModalsGet for password policies and GetPolicyHandle for audit policies via pywin32, let's break down how to access (and edit, if needed) those Local Security Policy > Security Options without opening the GUI. I'll focus on pywin32 first, then cover other reliable non-GUI methods:

Most Security Options are stored in the LSA database, so using pywin32's win32security module to call official LSA APIs is the most standardized approach.

Example: Read Security Options via LSA #

import win32security

# Open a handle to the local LSA policy (adjust permissions based on your needs)
policy_handle = win32security.LsaOpenPolicy(
    "",  # Target local machine
    win32security.POLICY_ALL_ACCESS
)

try:
    # Query security options-specific policy information
    # Note: Some options may require different info classes—check Microsoft docs for specifics
    security_options = win32security.LsaQueryInformationPolicy(
        policy_handle,
        win32security.PolicySecurityOptionsInformation
    )
    print("Raw Security Options data:", security_options)
finally:
    # Always close the policy handle when done
    win32security.LsaClose(policy_handle)

For options that don't map directly to a LSA info class, you can safely fall back to reading the registry (many Security Options sync directly to registry keys).

Nearly all Security Options are stored in two key registry paths:

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
• HKLM\SYSTEM\CurrentControlSet\Control\Lsa

Example: Read "Account: Administrator Account Status" #

import win32api
import win32con

# Define the registry path and value name for the setting
reg_path = r"SYSTEM\CurrentControlSet\Control\Lsa"
value_name = "DisableAdminAccount"

try:
    # Open the registry key with read access
    reg_key = win32api.RegOpenKey(
        win32con.HKEY_LOCAL_MACHINE,
        reg_path,
        0,
        win32con.KEY_READ
    )
    # Query the value
    value, _ = win32api.RegQueryValueEx(reg_key, value_name)
    print(f"Administrator Account Status: {'Disabled' if value == 1 else 'Enabled'}")
    win32api.RegCloseKey(reg_key)
except FileNotFoundError:
    print("This setting doesn't exist on the system.")

Note: Modifying registry keys requires admin privileges, and some settings need a system restart or gpupdate /force to take effect.

If you don't need programmatic access, Windows built-in secedit lets you export/import Security Options as a text config file:

Export Security Options to a Config File #

secedit /export /cfg C:\temp\security_options.cfg /areas SECURITYPOLICY

You can parse the plaintext .cfg file to read settings, or modify it and re-import:

secedit /configure /cfg C:\temp\security_options.cfg /areas SECURITYPOLICY

WMI's Win32_SecuritySetting class covers some Security Options, though its scope is more limited than LSA or the registry:

import wmi

c = wmi.WMI()
for setting in c.Win32_SecuritySetting():
    print(f"Setting Name: {setting.Name} | Current Value: {setting.Setting}")

To recap: Start with pywin32 + LSA APIs for the most official approach. For edge cases, registry access is reliable. If you just need to read settings quickly, secedit exports are easy to work with.

内容的提问来源于stack exchange，提问作者MothTools