Lock down User account for script.

From: Derek (dawc21@hotmail.com)
Date: 03/16/03

  • Next message: betty: "cookies"
    From: "Derek" <dawc21@hotmail.com>
    Date: Sun, 16 Mar 2003 15:18:30 -0700
    
    

    I have written a logon script that checks which domain the workstation is
    in. If it is not in the correct domian it will join the machine to the
    correct domain. The problem is that the script is in plain text therefore a
    username and password are there. I would like to secure this account so
    that the only thing it can do is join workstations to the domain. I have
    given the account that right and nothing else. I have also said that it
    cannot log on to any machines but when I do that It gets an access denied
    error if it tries to add the machine. I would like to be able to give that
    account the right to join workstations but it can not be used to login
    interactivly. Or is there some way to encrypt that batch file so that it
    cannot be read. I have tried bat2exe and several others and they all seem
    to choke on my script. Any help would be greatly apprecieated.


  • Next message: betty: "cookies"

    Relevant Pages

    • Re: Deploying Red Hat Workstations
      ... > can easily make changes to the workstations all at once. ... Have the central server push out to each host. ... > This script will contain any changes that I need to make. ... I would automate SCP from the server to a user account (not ...
      (Fedora)
    • Re: Script used to create computer accounts does not perform as expect
      ... When I create computer objects, I set the appropriate bits of the ... This would account ... Here is the Script ... Create-computer-accounts.vbs COM-391DC9C841E Workstations ...
      (microsoft.public.windows.server.active_directory)
    • Re: How can I change the admin password of all our XP PCs on the doma
      ... I believe that for a domain joined workstation, disable the local admin ... means you can't use a domain admin account to logon, ... If you want to control the Local Administrators on the workstations, ... the script against any PC? ...
      (microsoft.public.windows.server.active_directory)
    • Securing a user account for use in a script
      ... I have written a logon script that checks which domain the workstation is ... If it is not in the correct domain it will join the machine to the ... that the only thing it can do is join workstations to the domain. ... given the account that right and nothing else. ...
      (microsoft.public.win2000.security)
    • Re: Disable/Delete unused workstations
      ... This script will remove inactive machine accounts in Active Directory ... > is there a way to automatically disable or delete workstations not used in ...
      (microsoft.public.win2000.group_policy)

  • Quantcast