Raising User rights to Admin during logon, then lowering after logon has finished.

Hi,

This is the set-up that i have

Windows 2000 domain
500 Roaming user profiles
Windows 2000 Terminal Servers

I have been told by someone that it is possible to raise a users security from a normal user to a power user or even administrator during logon, then be able to lower the security again after logon.

My questions are as follows

1) Is this actually possible?
2) If it is, can someone tell me how to do this, e.g group policy or send me a link.

I want to try to do this so i can do some things that i would not normally be able to do with users during the logon process.

Any help on this would be much appreciated.


Thanks
laytonblackhamAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

grayeCommented:
Tell us what you're trying to do... perhaps there is an easier way

For example, if you create a Startup script (no, not a Login script!) the script runs under the context of the LocalSystem account (which already has administrative priviledges).   We typically put things in the Startup script that require elevated priviledges and then put things in the Login script that require the currently logged in user's account.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ECNSSMTCommented:
during the logon process, the system during the authenication process is determining who you are. The rights you are then given are predetermined by your profile.  There may be processes scripted by your admin to 'RUN AS' a certain user profile.  There may be services that run that may have more or less rights than you have.
Regards,
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.