Re: Drive Mapping Script Based on Group Membership Fails Due to LDAP Q

The easiest way to test to see if a script can be run as a local user is
once logged on run it locally. I see no special calls in the script you
pointed to that require special rights.

Where is the script located that it is failing in the logon script?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"wheresITat" <wheresITat@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D2628800-C136-4328-B3AA-DB9AFE0F70C3@xxxxxxxxxxxxxxxx
I recently tried to deploy a logon script using VBScript that uses an LDAP
query to gain knowledge about the currently logged on user's group
membership. The script then maps drives based on the user's group
membership.

The problem I encountered is that when I try running the script as a user
who is not a member of the Domain Admins security group, the script fails.
When logged in as an administrator, the script runs to perfection.

What specific security setting can I change to allow members of the Domain
Users security group permission to run the script?

Here is the URL of the article containing the script:
http://www.microsoft.com/technet/scriptcenter/resources/qanda/dec04/hey1210.mspx



.

Relevant Pages

  • Re: AD group logon script question
    ... like I described our logon script: ... If individuals need special access to certain resources, ... and each group must be protected from the administrators of the other. ... membership as required. ...
    (microsoft.public.scripting.vbscript)
  • Re: HELP..Need help with script that auto adds group to local admin group.
    ... client OS is Win9x, then a loop is required to retrieve this. ... you can change membership in all local ... Best is often to use a Startup script to make a global group a member of the ... local administrators group on every machine. ...
    (microsoft.public.scripting.vbscript)
  • Re: Local computer - privileged access - active directory question
    ... I've looke at Richard's site and found a vbs script that comes ... The program EnumLocalGroup.vbs enumerates the membership of a local group. ... The program can be easily modified to enumerate the membership of a local ... NetBIOS names and enumerate the membership of a local group on each ...
    (microsoft.public.windows.server.scripting)
  • Re: Need script to list various groups and there users
    ... Would it be very easy to add the user membership lookup to this script? ... To restrict this to groups that have the string "admin" in the name, ... This explains how to specify the attribute values to retrieve in the comma ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to restrict users to search in their own Organizational Unit
    ... If I need to create a security group per OU and then add all users ... permissions is in and of itself a poor practice. ... General script logic: ... of users with this membership as there is no built-in ...
    (microsoft.public.windows.server.active_directory)
Loading