GPO Assigned Logon Scripts

Hi,



Hopefully a quick question, currently all our users have "Local Admin"
rights on their workstations, i'm trying to migrate away from this, but i've
encountered problems as their logon scripts write files to the Windows
directory (which is obviously restricted for normal domain users).



I'd like to change to logon scripts (batch files) to VBS but my question is,
when a logon script is assigned to a user in GPO, does the script run with
the same rights as the user logging on, or as SYSTEM, or even another
account?



Many thanks



Jon


.

Relevant Pages

  • Re: Time issue
    ... Hi Dan, ... Does not require logon scripts or admin rights, ... > but that won't work since basic users don't have the ... > My W2K PC's are ok since users have rights via my AD ...
    (microsoft.public.win2000.security)
  • Re: login script that moves a user account to an existsting OU
    ... > But what about group policy logon scripts? ... user's security rights. ... user account or in group policy. ...
    (microsoft.public.windows.server.scripting)
  • another login script question
    ... A couple of weeks ago I posted a question about logon scripts and was ... I've been using login script #6. ... ' Bind to the computer object in Active Directory with the LDAP ... However, if they do have rights to the printer, ...
    (microsoft.public.windows.server.active_directory)
  • Logon Script
    ... A couple of weeks ago I posted a question about logon scripts and was ... I've been using login script #6. ... ' Bind to the computer object in Active Directory with the LDAP ... However, if they do have rights to the printer, ...
    (microsoft.public.windows.server.scripting)
  • RE: Using the RUNAS command
    ... use it in logon scripts ... "anon" wrote: ... > then enter a user with administrative rights. ... >> pwermission to run some of the functions that the batch files run. ...
    (microsoft.public.windowsxp.general)