GPO: apply logon/off scripts changing the registry on non-admin us

[Guest]

Hello,

I manage a w2k domain and would like to execute a script on logoff for some
of my users.
The script is like "regedit.exe toto.reg" and change some keys in the
registry.
The GPO I've made for that works fine if the user has local administrative
rights but failed in the other cases (when the user has less rights)
Could somebody tell me how I can proceed to execute this process from the
GPO with enough rights to perform and without changing the group membership
of my users? Is it possible?
I've thought to change the security rights in the GPO adding the group
"Domain users" and giving him the rights to read and apply the strategy but
it failed too.

thanks in advance for your tips ...
Frédéric MARTIN

 

[Ryan Hanisco]

Frédéric,

The best way to do this is to use a utility called SANUR... this will let
you do a RUNAS with a password included. This way you can run the script as
a user that has local administrator rights on the workstations (such as a
Domain Admin).

You can get the utility at: http://www.commandline.co.uk/sanur/

Cheers,

Ryan Hanisco
MCSE, MCDBA
Flagship Integration Services

 

[Guest]

Hi Ryan,

Thanks you for your reply 'coz sanur is effectively the tool I needed to do
my job ..
Easy to use so that's a very good advice ;o)

Best regards,
Frédéric