Re: SBS_Login script prompts UAC on Vista machines....


Hello,

Thank you for your post.

Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:

The SBS_LOGIN_SCRIPT.bat in user's Properties--->profile always get UAC
prompted such as:

User Account Control
An unidentified program wants access to your computer

You have a concern how to correct it and whether the same issue will
happens when you configure the script as the logon script in group policy
objects.

If I have misunderstood your concerns please feel free to let me know.

Explanation :
==============

Unfortunately, this is the expected behavior. When SBS users logon to a
computer, the SBS_LOGIN_SCRIPT.bat file will be run and it will trigger UAC
prompt on Vista clients. about the SBS_LOGIN_SCRIPT.bat for users on the
Windows Vista will cause the UAC prompt every login. For the clients that
have been installed proper SBS components, you can safely remove the logon
script for the user from the Properties--->profile.

As Cliff mentioned about the group policy, by default all users logging on
to Windows Vista use their full token (elevated token) to process Group
Policy and logon scripts. You can remove the Logon script from the user's
Properties and configure in the Group Policy as the user logon script. Both
the script and setup.exe will run under the user's full access token and it
should correct this issue.

For your reference:
==============

Deploying Group Policy Using Windows Vista --->Group Policy Scripts can
fail due to User Account Control
http://technet2.microsoft.com/WindowsVista/en/library/5ae8da2a-878e-48db-a3c
1-4be6ac7cf7631033.mspx

Hope it helps.


Sincerely,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: Problem with logon script, IE and group policy
    ... addressed in the Developer newsgroups. ... | I have have a problem involving VBscript, Group Policy and Internet ... | The problem revolves around my VBscript logon script which uses an IE ...
    (microsoft.public.windows.group_policy)
  • Re: Logoff script to restore a registery subkey
    ... When the user logs back in, group policy should ... The logon script adds Internet ... explorer settings to disable things like using ctrl-O to openn the Open ... WshShell.Exec ("%comspec% /c reg RESTORE HKCU\Software\Policies\Microsoft ...
    (microsoft.public.scripting.vbscript)
  • Re: How to map a drive via a policy
    ... You can define a TS-specific logon script in your TS Group Policy. ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > We are running a 2K3 Terminal Server and a shipping program ...
    (microsoft.public.win2000.termserv.clients)
  • Re: Remote Desktop Security
    ... On the Remote Desktop host machine enable the Group Policy to always prompt for a password... ... Al Jarvi (MS-MVP Windows Networking) ...
    (microsoft.public.windowsxp.work_remotely)
  • RE: Windows Update v5 and XPSP2RC2
    ... Just set a logon script which runs "regedit /s registrypatch.reg" (or ... Windows Update v5 and XPSP2RC2 ... You don't even need Group Policy (not that I'm not a huge proponent of GP ... >> communication is a confidential and proprietary business ...
    (Focus-Microsoft)