help using logon scripts


G

Guest

In our AD network, we need to set up a new route for some PCs so they can access special services available in our network. For those users, we would like to issue the ROUTE ADD command automatically when they log in to their PCs. This command fails with insufficient privileges, is there a way to have the logon script run at a higher privilege level (i.e. administrator) without giving the user themselves that level of privilege?

Thanks.
 
Ad

Advertisements

S

Simon Geary

You can use the runas.exe command to run the route add command under local
administrator privileges. http://support.microsoft.com/?id=225035
Note that this would mean having the administrator password displayed in
clear text on the logon script.

Dave said:
In our AD network, we need to set up a new route for some PCs so they can
access special services available in our network. For those users, we would
like to issue the ROUTE ADD command automatically when they log in to their
PCs. This command fails with insufficient privileges, is there a way to have
the logon script run at a higher privilege level (i.e. administrator)
without giving the user themselves that level of privilege?
 
G

Guest

Thanks Simon however I have one additional question, when using RUNAS, it seems that it always prompts for the password. Do you know of a way to embed the password into the command line so the user does not have to enter it

Thanks again.
 
S

Simon Geary

You're right, I didn't realise that was a limitation of runas. I did a bit
of digging and found this plug-in that lets you use a password in the batch
file.
http://www.bykeyword.com/downloads/software-11/download-11095.html

Dave said:
Thanks Simon however I have one additional question, when using RUNAS, it
seems that it always prompts for the password. Do you know of a way to embed
the password into the command line so the user does not have to enter it?
 
Ad

Advertisements

G

Guest

That did it Simon and it works great. I copied the RunAsP application only to the logon directory on the AD server and ran the login script which triggered the RunAsP program to process the ROUTE ADD. It worked exactly as expected

Thanks for your help.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top