access denied on startup script

  • Thread starter Thread starter jb
  • Start date Start date
J

jb

I need to copy a file onto the local machines for an OU of computers. I
created a logon script and created a computer policy. It calls a bat file
that should copy the file. It fails with access denied. Our users are
standard machine users. How can I bypass the ntfs security? Why doesn't it
run with elevated rights since it is a machine policy?
 
Hey JB,

Machine accounts typically use Authenticated Users as their right. If you
have limited NTFS rights that don't include this group, it should fail. If
it is placed on a domain controller, also make sure that Authenticated
Users are included in the User Right Assignment for Bypass Traverse
Checking so they can access the share. This is a default right.

To test to see if the machine has correct rights, use the AT scheduler to
run CMD and, from that prompt (which will use SYSTEM credentials) try to
navigate to and run the batch file.

Jim
 
Back
Top