[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 375
  • Last Modified:

Rights needed to run VBS script at logon.

Hello,
Am using a VBS script at logon to add computers to a security group in AD.  I have one group, teachers, which are local admins on the workstations and the scripts are workign correctly.  I have another group, students, whose accounts are locked down pretty tightly by GPO that is receiving a VBS script error permission denie when they login.  I have tried moving the script to a machine start up script and received reports that everyone was now receiving the error.  Can anyone tell me where to look to allow the script to run for students?  Runnign Windows Server 2008 R2.  Thanks.

0
astring
Asked:
astring
  • 2
  • 2
1 Solution
 
thomasd04Commented:
Hi astring. If I understand correctly you are trying to execute commands that require elevated privileges not permitted to the logon script.  Perhaps you can use one of these tools to execute these types of tasks:
    * SU.EXE in the Windows 2000 Resource Kit
    * PsExec (http://technet.microsoft.com/en-us/sysinternals/bb897553)
    * TqcRunas (http://www.quimeras.com/default.asp?control=1)
    * CPAU (http://www.joeware.net/freetools/tools/cpau/index.htm)
    * RUNASSPC (http://robotronic.de/runasspcEn.html)
0
 
astringAuthor Commented:
Hello Thomas,
What I was trying to do was to run a VBS logon script that would add computers to a security group.  I have found the answer...the user needs the "write" permission to the group to which the coputer will be added.   Once I did this, the error went away and the m achines are showing up in the correct group.  Thanks for the response though.
0
 
thomasd04Commented:
Sure. Glad you figured it out!
0
 
astringAuthor Commented:
Researched and found soulution on my own.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now