Look into CPAU. That program will let you run login scripts in the
context of whoever you want. We use it here quite a bit.
Steve Bostedor
http://www.vncscan.com
-----Original Message-----
From: Depp, Dennis M. [mailto:deppdm@ornl.gov]
Sent: Thursday, March 09, 2006 7:12 AM
To: Murad Talukdar; focus-ms@securityfocus.com
Subject: RE: user logon script context....
Murad,
It is not possible to run logon scripts under a different context. You
might be able to change the context in the script with runas, but this
will require using a password in a script.
You might want to look at using computer startup scripts. These will
run in the context of local system; however, you will not be able to
know what user will be on the system.
Denny
-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@subway.com]
Sent: Thursday, March 09, 2006 1:35 AM
To: 'Murad Talukdar'; focus-ms@securityfocus.com
Subject: RE: user logon script context....
Okay a further google showed me the answer--but some clarification would
be great-can logon scripts be set to run under a chosen context?
Ie, if I don't want it to run under either SYSTEM or localadmin, can
this be done? (I get the feeling this could be no).
Regards
Murad Talukdar
-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@subway.com]
Sent: Thursday, March 09, 2006 4:31 PM
To: 'focus-ms@securityfocus.com'
Subject: user logon script context....
Hi guys,
Can anyone point me to a paper detailing what security context a User
logon script runs under?
I want to know what kind of permissions a script(well, I understand that
it doesn't have permissions itself but runs AT a certain level of
access) has when that user logs one.
For instance, if the user is just a restricted user locally, should I be
able to call a .exe in the script which loads and writes to the c drive?
All
this to be done through a GPO.
Kind Regards
Murad Talukdar
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
