Raising User rights to Admin during logon, then lowering after logon has finished.

Posted on 2006-04-04
Last Modified: 2010-04-13

This is the set-up that i have

Windows 2000 domain
500 Roaming user profiles
Windows 2000 Terminal Servers

I have been told by someone that it is possible to raise a users security from a normal user to a power user or even administrator during logon, then be able to lower the security again after logon.

My questions are as follows

1) Is this actually possible?
2) If it is, can someone tell me how to do this, e.g group policy or send me a link.

I want to try to do this so i can do some things that i would not normally be able to do with users during the logon process.

Any help on this would be much appreciated.

Question by:laytonblackham
    LVL 41

    Accepted Solution

    Tell us what you're trying to do... perhaps there is an easier way

    For example, if you create a Startup script (no, not a Login script!) the script runs under the context of the LocalSystem account (which already has administrative priviledges).   We typically put things in the Startup script that require elevated priviledges and then put things in the Login script that require the currently logged in user's account.
    LVL 14

    Assisted Solution

    during the logon process, the system during the authenication process is determining who you are. The rights you are then given are predetermined by your profile.  There may be processes scripted by your admin to 'RUN AS' a certain user profile.  There may be services that run that may have more or less rights than you have.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now