?
Solved

Rights needed to run VBS script at logon.

Posted on 2011-02-21
4
Medium Priority
?
369 Views
Last Modified: 2012-05-11
Hello,
Am using a VBS script at logon to add computers to a security group in AD.  I have one group, teachers, which are local admins on the workstations and the scripts are workign correctly.  I have another group, students, whose accounts are locked down pretty tightly by GPO that is receiving a VBS script error permission denie when they login.  I have tried moving the script to a machine start up script and received reports that everyone was now receiving the error.  Can anyone tell me where to look to allow the script to run for students?  Runnign Windows Server 2008 R2.  Thanks.

0
Comment
Question by:astring
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 34944128
Hi astring. If I understand correctly you are trying to execute commands that require elevated privileges not permitted to the logon script.  Perhaps you can use one of these tools to execute these types of tasks:
    * SU.EXE in the Windows 2000 Resource Kit
    * PsExec (http://technet.microsoft.com/en-us/sysinternals/bb897553)
    * TqcRunas (http://www.quimeras.com/default.asp?control=1)
    * CPAU (http://www.joeware.net/freetools/tools/cpau/index.htm)
    * RUNASSPC (http://robotronic.de/runasspcEn.html)
0
 

Accepted Solution

by:
astring earned 0 total points
ID: 34945879
Hello Thomas,
What I was trying to do was to run a VBS logon script that would add computers to a security group.  I have found the answer...the user needs the "write" permission to the group to which the coputer will be added.   Once I did this, the error went away and the m achines are showing up in the correct group.  Thanks for the response though.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 34945890
Sure. Glad you figured it out!
0
 

Author Closing Comment

by:astring
ID: 34986540
Researched and found soulution on my own.
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses
Course of the Month12 days, 15 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question