Solved

500 POINTS - ADD STATIC ROUTE VIA DOMAIN CONTROLLER AND GROUP POLICY

Posted on 2006-11-13
2
4,061 Views
Last Modified: 2008-01-09
I created a batch file that runs on global policy permissions under startup. It runs a simple route add statement. This works great for users that are Administrators but not at all for users that are basic users because route add statements can't be run due to a policy locking them down. Is there anyway to get this batch file to work without giving users the ability to modify any other network settings on there pc, or is there a way I can get group policy to just write this static route directly without requiring a batch file?

The computers are all Windows XP Professional SP2 and the AD is on Windows 2003 SP1.
0
Comment
Question by:ScubeduFan
2 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17932107
I would recommend to use the sysinternals tool PSEXEC for this;

http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/PsExec.mspx

download the tool and it would be something like this;

1. From the AD extract all the computer names and store it in a file (You can get this from AD admin tool)

2. Download psexec and just run it like this from your machine;

psexec @filewithcomputernames -u administrator -p <password> route.bat

You can use the same batch file which you used earlier.

Cheers,
Rajesh
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 17932449
Define the script in a policy as a *computer* startup script (and apply it to the OU with the client machines in it), not as a user logon script. The computer startup script runs with System account permissions, which makes it possible to change the route.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

30 Experts available now in Live!

Get 1:1 Help Now