Re: logon script

From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 11/01/02 

From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com>
Date: Thu, 31 Oct 2002 21:38:53 -0500

"JJ" <jazz4man@hotmail.com> wrote in message
news:363901c28143$1a9d65f0$2ae2c90a@phx.gbl...
> I have created a logon.bat and specified in GPO applied to
> root domain. I can run the script when logging on the
> domain but none of my users can.
> What right do I need to grant domain users group so they
> can run the script ???
> I took out the everyone group as security measure and dont
> know which access right to grant domain users to run a
> logon script!

As far as I know, the only permissions you need to look at are the NTFS file
permissions on the logon script file itself [and any files that the script
calls].

[On the other hand, if the login script tries to install, say, windows
security patches, the batch file will run but the security patches will not
install unless the users have local administrator priviledges to the
workstation.]

I think you would just grant "YOURDOMAIN\Domain Users" read permission in
the NTFS permissions on the script. That's a little better than the default
of "Everyone."

If that fails, enable file access failure auditing on the script files, then
check the Windows security event log to see what permissions are missing on
which files. For more instructions on enabling auditing, search this group
for "auditing."

Relevant Pages

  • Re: cant get access to disk share when connecting from a remote s
    ... The systems are DUTs. ... for each of the drives within the system. ... Everything in the scripts work except the file permissions below the shares ... the shares on the DUTs manually, after they run my rename script, but I would ...
    (microsoft.public.windows.server.scripting)
  • Re: VBA Script to Read WMP 11 Database
    ... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... Digital Media MVP: 2004-2007 ...
    (microsoft.public.windowsmedia)
  • Re: VBA Script to Read WMP 11 Database
    ... The script failed on the desktop when I downloaded WMP11, ... Just reviewing the bidding -- WMP 11 responds properly to commands in a VBS ... That's why the computer wouldn't let me manually change the permissions. ... The CREATOR OWNER is likely on windows to be one of the admin accounts ...
    (microsoft.public.windowsmedia)
  • Re: how to restrict users to search in their own Organizational Unit
    ... will be given the necessary permissions. ... Who would you DENY? ... decided a script can make it possible to accomplish, ... If I need to create a security group per OU and then add all users ...
    (microsoft.public.windows.server.active_directory)
  • Re: Script to Copy Files from a Share to a Client Not Working
    ... regardless of the value of overwrite. ... I have the permissions applied now, ... The script is in place and is executing as ... > The copy is instructing the file located on a SERVER to ...
    (microsoft.public.windows.server.active_directory)