Grant Standard User Elevated Privelages

More info:  http://www.oreilly.com/catalog/mwin2reg/chapter/ch07.html

Thanks for the links, unfortunatley we aren't running Active Directory so a Group Policy solution won't work.

Danny

Try using something like: http://www.microsoft.com/technet/scriptcenter/resources/qanda/dec04/hey1213.mspx the drawback to this, is that an admin password has to be hardcoded into the script. Most users will not know where to look for your scripts, let alone actually look through them- but it's one way to acomplish the task. But you may also try to employ the script encoder: http://www.microsoft.com/downloads/details.aspx?FamilyId=E7877F67-C447-4873-B1B0-21F0626A6329&displaylang=en as it will encode WSH/VbScript (which is wmi and ADSI scripts) http://msdn.microsoft.com/library/default.asp?url=/library/en-us/script56/html/seusingscriptencoder.asp
-rich

Rich,

That looks to be pretty much what I am after except that the logon scripts will be run on the local computer. Do I simply need to set the computer name variable to "." so the script connects to the local machine?

Danny

Also, since it's not well documented anywhere in the encoder, or on MS's site (from my breif serach) here is a fine example of what to do:
.vbe tells the os that the VBS script has been encoded (remember encoded, is not encrypted, it's not a great form of security- but it's better than plain-text)

to run an encoded vbs file:
cscript encoded-file.vbe

below is "encoded-file.vbs"  (a simple VBscript to show what user is running winword process)

strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colProcessList = objWMIService.ExecQuery _
    ("Select * from Win32_Process Where Name = 'Winword.exe'")

For Each objProcess in colProcessList
    objProcess.GetOwner strUserName, strUserDomain
    Wscript.Echo "Process " & objProcess.Name & " is owned by " _
        & strUserDomain & "\" & strUserName & "."
Next

and to encrypt it type:
screnc /l vbscript encoded-file.vbs encoded-file.vbe

open word, and run the encrypted script
cscript encoded-file.vbe

should return:
Process WINWORD.EXE is owned by domainX\userX
(domainX and userX will be the person running winword)

-rich

Rich, that looks like it will be pretty much exactly what I need.

When you say try the first script I take it you mean the one below giving strUsername and strUserDomain a proper value?

strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colProcessList = objWMIService.ExecQuery _
    ("Select * from Win32_Process Where Name = 'Winword.exe'")

For Each objProcess in colProcessList
    objProcess.GetOwner strUserName, strUserDomain
    Wscript.Echo "Process " & objProcess.Name & " is owned by " _
        & strUserDomain & "\" & strUserName & "."
Next

Cheers,
Danny

yes. Try using a user/pass that has admin rights on the machine (not necessarily a local machine account) But you may even try a local one just to doubel check...
-rich

Cool,

Based on the second script you posted I'm pretty confident I could get something working.

Thanks very much for your time!

Danny

Here is one I got going today... it uses Runas itself, and then uses sendkeys to send the password to runas... works well on local pc's

Option explicit
dim oShell
set oShell= Wscript.CreateObject("WScript.Shell")
' Replace the path with the program you wish to run c:\ etc...
oShell.Run "runas /noprofile /user:administrator ""C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"""
WScript.Sleep 100
'Replace the string yourpassword~ below with
'the password used on your system. Include tilde
oShell.Sendkeys "yourpassword~"
Wscript.Quit

Work's very well.
-rich

I'll give this a go. If it works it looks to be a lot less work than the answer I accepted.

Cheers!
Danny

I definatly like this a bit better, and encoded will help some also

screnc.exe /l vbscript  c:\runas.vbs c:\runas.vbe

All you have to do is double click on the vbe file, or use a batch file to call it (using cscript /nologo c:\runas.vbe)
-rich

cheers for that.

Also, thanks for posting after the answer was accepted that's pretty good of you! :0)

Danny