RE: user logon script context....



Murad,

It is not possible to run logon scripts under a different context. You
might be able to change the context in the script with runas, but this
will require using a password in a script.

You might want to look at using computer startup scripts. These will
run in the context of local system; however, you will not be able to
know what user will be on the system.

Denny


-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@xxxxxxxxxx]
Sent: Thursday, March 09, 2006 1:35 AM
To: 'Murad Talukdar'; focus-ms@xxxxxxxxxxxxxxxxx
Subject: RE: user logon script context....

Okay a further google showed me the answer--but some clarification would
be
great-can logon scripts be set to run under a chosen context?

Ie, if I don't want it to run under either SYSTEM or localadmin, can
this be
done? (I get the feeling this could be no).

Regards
Murad Talukdar

-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@xxxxxxxxxx]
Sent: Thursday, March 09, 2006 4:31 PM
To: 'focus-ms@xxxxxxxxxxxxxxxxx'
Subject: user logon script context....

Hi guys,
Can anyone point me to a paper detailing what security context a User
logon
script runs under?

I want to know what kind of permissions a script(well, I understand that
it
doesn't have permissions itself but runs AT a certain level of access)
has
when that user logs one.

For instance, if the user is just a restricted user locally, should I be
able to call a .exe in the script which loads and writes to the c drive?
All
this to be done through a GPO.

Kind Regards
Murad Talukdar






------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------



Relevant Pages

  • Re: [ Attn: Randy ] Ad-hoc Parsing?
    ... > 1) They were out of context quotes, as the quotes came with no context. ... embed cpu instructions within a DOS/Windows batch script. ... that this also is possible with bash scripts. ... statement "It can execute the .com file as easily as a command.com ...
    (alt.lang.asm)
  • Re: Finding line numbers of HTML elements
    ... but mostly because the context of application significantly ... contexts in which a script erroring-out at runtime would be considered ... features is employed) and propose superficial and stupid responses to ... practice designing for clean-degradation in response to negative results ...
    (comp.lang.javascript)
  • Re: Changing file permissions using vbscript
    ... You, or rather the context your script will run in, may only ... ownership, such as by having Full Control. ... The file will be defined with the permissions that are effective ... If the file is defined with permissions that allow the context ...
    (microsoft.public.security)
  • Re: right click script
    ... He posted the script he was using. ... Using Microsoft Office FrontPage 2003 ... > reason to use right click other than to stop the context menu. ... >>> Microsoft FrontPage MVP ...
    (microsoft.public.frontpage.programming)
  • Re: Extracting data from an XML to put into a constant
    ... A script runs is in a script context in a host application (wscript, ... The host application holds a reference the context via an IActiveScript ...
    (microsoft.public.scripting.vbscript)