Re: Logon script

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Richard Mueller" <rlmueller-NOSPAM@xxxxxxxxxxxxxxxxxxxx>
Date: Mon, 20 Mar 2006 08:18:50 -0600

Laurent wrote:

I develop a logon script and I have some security issues. Some tasks in my
script need adminitrative rights on the local machine and my users do not
have these permissions. How can I do (without using a run as with username
and pwd in clear) ?

Hi,

Logon scripts run with the permissions of the user, but startup scripts
(configured in Group Policy) run with System permissions on the local
computer. Most administrative tasks can be done in a Startup script. Just
remember that there is no user and the script runs with the permissions of
the computer object in the rest of the domain.

--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net

.

References:
- Logon script
  - From: Laurent

Prev by Date: gPCWQL Filter
Next by Date: Re: Moving Multiple users from many differnt OU's at once
Previous by thread: Logon script
Next by thread: gPCWQL Filter
Index(es):
- Date
- Thread

Relevant Pages

Re: Startup Scripts
... "Trinity Catholic High School" wrote: ... local machine, and setting in the group policy the local path for the ... I run the script from the command-line when logged in it works ... If there is a permissions problem, the permissions need to be granted to the ...
(microsoft.public.windows.server.general)
Re: Startup Scripts
... I granted permissions to domain ... Basically, I'm trying to create a computer specific startmenu, for our ... local machine, and setting in the group policy the local path for the ... I run the script from the command-line when logged in it works ...
(microsoft.public.windows.server.general)
Re: cant get access to disk share when connecting from a remote s
... The systems are DUTs. ... for each of the drives within the system. ... Everything in the scripts work except the file permissions below the shares ... the shares on the DUTs manually, after they run my rename script, but I would ...
(microsoft.public.windows.server.scripting)
Re: VBA Script to Read WMP 11 Database
... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... Digital Media MVP: 2004-2007 ...
(microsoft.public.windowsmedia)
Re: VBA Script to Read WMP 11 Database
... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... The CREATOR OWNER is likely on windows to be one of the admin accounts ...
(microsoft.public.windowsmedia)