RE: Script or Other Method to Reboot

OK, thanks. I'm satified with that answer.

"Tom Che [MSFT]" wrote:

> Hi,
>
> Thanks for your reply. Sorry for my delayed response due to the weekend.
>
> We need different privileges when using Shutdown command and shutdown the
> computer via menu. This is by design. I think this design may consider
> that only administrator will use command to shutdown the computers. This
> caused some pains indeed. It is my pleasure to help you to reflect your
> recommendation to the proper department for their consideration.
>
> Yes, if the user has sufficient knowledge and can edit the VB script, we
> are not able to hide the password because it is clear text. To hide this,
> we may need to compile the script. This will be a development related
> request and would best be addressed in the Developer newsgroups. I have
> provided the link below:
>
> <http://msdn.microsoft.com/newsgroups/default.asp>
>
> Or you may ask for developer support:
> <http://support.microsoft.com/directory/directory/phonepro.asp?sd=msdn>
>
> Hope this helps!
>
> Have a nice week!
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> That seems to contradict what you're saying, but I get the feeling you're
> the one who is correct.
>
> Anyway, in your script you have given me what I wanted in that it uses
> Runas to do this. The problem is that the user can read the script and see
> the Administrator's password. I thought there was some way to "hide" it
> VBScript. No?
>
> --------------------
> >Thread-Topic: Script or Other Method to Reboot
> >thread-index: AcYeKGHjXzMgxP8WSA2uGXkanJ9IUg==
> >X-WBNR-Posting-Host: 24.60.22.83
> >From: "=?Utf-8?B?Q2hhcmxpZQ==?=" <baboon@xxxxxxxxxxxxxx>
> >References: <2E0F1B09-7827-45E2-A7E3-CB7F49E0CC0D@xxxxxxxxxxxxx>
> <hOpJ$XYHGHA.3764@xxxxxxxxxxxxxxxxxxxxx>
> >Subject: RE: Script or Other Method to Reboot
> >Date: Fri, 20 Jan 2006 17:17:01 -0800
> >Lines: 127
> >Message-ID: <CCE82A64-21B9-495E-B58A-FC797C6F093E@xxxxxxxxxxxxx>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windowsxp.configuration_manage
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.windowsxp.configuration_manage:38208
> >X-Tomcat-NG: microsoft.public.windowsxp.configuration_manage
> >
> >Thanks for the reply.
> >
> >How were you able to know that only Administrators can use the Shutdown
> >command? I thought that maybe it was considered a remote shutdown even on
> >the local machine, which would explain it. But looking at the Windows
> Help
> >Center, it says the following: "Users must be granted the Shut down the
> >system user right to shut down either a local or remotely administered
> >computer using the shutdown command." Regular users do have that right on
> >non-servers. That seems to contadict what you're saying, but I get the
> >feeling you're the one who is correct.
> >
> >Anyway, in your script you have given me what I wanted in that it uses
> Runas
> >to do this. The problem is that the user can read the script and see the
> >Administrator's password. I thought there was some way to "hide" it
> >VBScript. No?
> >
> >I can definitely use the script if the user can't read the password.
> >
> >
> >
> >"Tom Che [MSFT]" wrote:
> >
> >> Hi,
> >>
> >> Thanks for posting here.
> >>
> >> From your post, my understanding of this issue is: when the users try to
> >> run a batch file to restart the computer, they get an error message
> saying
> >> "A required privilege is not held by the client". If this is not
> correct,
> >> please feel free to let me know.
> >>
> >> Actually, to restart or shutdown the computer via Shutdown command, the
> >> user must be a member of Administrators group. If you don't want to add
> >> the users to Administrators group, you may try to use the following
> script
> >> to run the batch file:
> >>
> >> <package>
> >> <job id="vbs">
> >> <script language="VBScript">
> >> dim wshShell
> >> set wshShell=CreateObject("Wscript.Shell")
> >> wshShell.run("runas /u:ADMINISTRATOR a.bat")
> >> Wscript.Sleep 100
> >> wshShell.AppActivate "Runas"
> >> Wscript.Sleep 300
> >> wshShell.SendKeys "PASSWORD"
> >> Wscript.Sleep 100
> >> wshShell.SendKeys "~"
> >> Wscript.Sleep 100
> >> </script>
> >> </job>
> >> </package>
> >>
> >> Note:
> >> 1. Please change ADMINISTRATOR to the administrator account on the
> machine
> >> 2. Please change PASSWORD to the password of the administrator account
> >> 3. Please change a.bat to the file name of your batch file
> >>
> >> You may copy above script to a text file and save as *.wsf file in the
> same
> >> folder with the batch file. After run the script, any user can restart
> the
> >> computer.
> >>
> >> Hope this helps.
> >>
> >> Have a nice day!
> >>
> >> Sincerely,
> >> Tom Che
> >> Microsoft Online Partner Support
> >> Get Secure! - www.microsoft.com/security
> >>
> >> =====================================================
> >> When responding to posts, please "Reply to Group" via your newsreader so
> >> that others may learn and benefit from your issue.
> >> =====================================================
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >> --------------------
> >> >Thread-Topic: Script or Other Method to Reboot
> >> >thread-index: AcYdPJOkxASlZrXgQmekCi7/ojdyTg==
> >> >X-WBNR-Posting-Host: 136.167.76.86
> >> >From: "=?Utf-8?B?Q2hhcmxpZQ==?=" <baboon@xxxxxxxxxxxxxx>
> >> >Subject: Script or Other Method to Reboot
> >> >Date: Thu, 19 Jan 2006 13:09:03 -0800
> >> >Lines: 19
> >> >Message-ID: <2E0F1B09-7827-45E2-A7E3-CB7F49E0CC0D@xxxxxxxxxxxxx>
> >> >MIME-Version: 1.0
> >> >Content-Type: text/plain;
> >> > charset="Utf-8"
> >> >Content-Transfer-Encoding: 7bit
> >> >X-Newsreader: Microsoft CDO for Windows 2000
> >> >Content-Class: urn:content-classes:message
> >> >Importance: normal
> >> >Priority: normal
> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >> >Newsgroups: microsoft.public.windowsxp.configuration_manage
> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >> >Xref: TK2MSFTNGXA02.phx.gbl
> >> microsoft.public.windowsxp.configuration_manage:38190
> >> >X-Tomcat-NG: microsoft.public.windowsxp.configuration_manage
> >> >
> >> >Hi -
> >> >
> >> >This shouldn't be too difficult.
> >> >I need to configure some shared machines so that regular users cannot
> >> >shutdown, but can reboot.
> >> >
> >> >I can use Group Policy to Remove Shutdown from the Start Menu and
> Security
> >> >Box, but then I need something for the user to click on to reboot the
> >> machine
> >> >when needed.
> >> >
> >> >I made a batch file using the Shutdown utility that contains the string
> >> >"shutdown -r -d p:4:1", but when a regular user tries to run they get
> "A
> >> >required privilege is not held by the client." Regular Users have the
> >> right
> >> >to shut down the machine and the "p:" switch is used, so I'm not sure
> why
> >> a
> >> >regular user can't use Shutdown in this case.
> >> >
> >> >In any case, can someone show me a script or some other method to do
> this?
> >> >
> >> >Thanks.
> >> >
> >>
> >>
> >
>
>
.

Relevant Pages

  • RE: Script or Other Method to Reboot
    ... We need different privileges when using Shutdown command and shutdown the ... Yes, if the user has sufficient knowledge and can edit the VB script, we ... >> run a batch file to restart the computer, ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: log off policy to force reboot
    ... So you're saying I should keep it as a log off script, but place it in the Computer Accounts OU? ... Log off scripts should be applied to OUs that contain user objects since it is a user configuration option, and won't apply to computer objects. ... If it is a shutdown script, it should be applied to an OU with computer objects. ... I created a logoff scritp that uses the shutdown command to reboot the computers in five seconds and to provide a user message. ...
    (microsoft.public.windows.group_policy)
  • Re: Command Line shutdown with other people logged on
    ... If you have a way to run a script or batch file within the XP/VM, ... you might try using the cmd line shutdown command. ... Do you want to continue shutting down Windows? ...
    (microsoft.public.windowsxp.general)
  • Re: log off policy to force reboot
    ... is your script a log off script or a shutdown script? ... Log off scripts should be applied to OUs that contain user objects since it is a user configuration option, and won't apply to computer objects. ... If it is a shutdown script, it should be applied to an OU with computer objects. ... I created a logoff scritp that uses the shutdown command to reboot the computers in five seconds and to provide a user message. ...
    (microsoft.public.windows.group_policy)
  • RE: Script or Other Method to Reboot
    ... run a batch file to restart the computer, they get an error message saying ... Actually, to restart or shutdown the computer via Shutdown command, the ... Please change ADMINISTRATOR to the administrator account on the machine ... You may copy above script to a text file and save as *.wsf file in the same ...
    (microsoft.public.windowsxp.configuration_manage)