help using logon scripts

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

In our AD network, we need to set up a new route for some PCs so they can access special services available in our network. For those users, we would like to issue the ROUTE ADD command automatically when they log in to their PCs. This command fails with insufficient privileges, is there a way to have the logon script run at a higher privilege level (i.e. administrator) without giving the user themselves that level of privilege?

Thanks.
 
You can use the runas.exe command to run the route add command under local
administrator privileges. http://support.microsoft.com/?id=225035
Note that this would mean having the administrator password displayed in
clear text on the logon script.

Dave said:
In our AD network, we need to set up a new route for some PCs so they can
Click to expand...
access special services available in our network. For those users, we would
like to issue the ROUTE ADD command automatically when they log in to their
PCs. This command fails with insufficient privileges, is there a way to have
the logon script run at a higher privilege level (i.e. administrator)
without giving the user themselves that level of privilege?
 
Thanks Simon however I have one additional question, when using RUNAS, it seems that it always prompts for the password. Do you know of a way to embed the password into the command line so the user does not have to enter it

Thanks again.
 
You're right, I didn't realise that was a limitation of runas. I did a bit
of digging and found this plug-in that lets you use a password in the batch
file.
http://www.bykeyword.com/downloads/software-11/download-11095.html

Dave said:
Thanks Simon however I have one additional question, when using RUNAS, it
Click to expand...
seems that it always prompts for the password. Do you know of a way to embed
the password into the command line so the user does not have to enter it?
 
That did it Simon and it works great. I copied the RunAsP application only to the logon directory on the AD server and ran the login script which triggered the RunAsP program to process the ROUTE ADD. It worked exactly as expected

Thanks for your help.
 
Back
Top