Windows Login scripts

[TMPadmin]

I have a program I want to install using my login script. But through group policies I have locked out any .exe for all users. How can I elevate privileges for that install then take them away? I'm using GP's login script and have a different script just for the install. I'm sure there is a parameter but I don?t know it, nor can I find it. But I'm looking.

Thanks for any help!

 

[mikecel79]

Login scripts always run in the context of the logging in user. So you have two choices. You can either run the install in a Startup script (which runs as the LocalSystem account) or you can use a tool like CPAU which lets you run a process as another user account.

 

[TMPadmin]

Originally posted by: mikecel79
Login scripts always run in the context of the logging in user. So you have two choices. You can either run the install in a Startup script (which runs as the LocalSystem account) or you can use a tool like CPAU which lets you run a process as another user account.

I thought there was a way to elevate privileges in a GP login script. I just read that it was possible but can't find the way. I have come across a few third party ways but would like to not get that involved.

Thanks!

 

[mikecel79]

Originally posted by: TMPadmin

Originally posted by: mikecel79
Login scripts always run in the context of the logging in user. So you have two choices. You can either run the install in a Startup script (which runs as the LocalSystem account) or you can use a tool like CPAU which lets you run a process as another user account.

I thought there was a way to elevate privileges in a GP login script. I just read that it was possible but can't find the way. I have come across a few third party ways but would like to not get that involved.

Thanks!

Login scripts will always run in the context of the user. Your thinking about Startup scripts. These run in the context of LocalSystem. I would look into them if you don't want to use a 3rd party utility.