I don't know what your budget might be, but a couple of my clients use TQCRunAs by Quimeras (www.quimeras.com) for this kind of thing... this tool lets you "encapsulate" a secondary logon, the credentials for that logon, and a command in an encrypted .exe, which you could then use in a logon script. It's not free, but it's not expensive either, and it's a great way to "push" things to users that require higher credentials, without exposing any accounts.
Dan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Tuesday, July 19, 2005 8:27 AM To: [email protected] Subject: RE: [ActiveDir] Logon script with Admin rights Al, One of the problems with the .ZAP format - it only executes the underlying program for install - but cannot be executed with elevated privliges as it is run under the user's context. .MSI is much better, but is not easy to create them correctly and effectively without some experience and practice. However, they can be written to install at an elevated context. Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Garrett Sent: Tuesday, July 19, 2005 10:02 AM To: [email protected] Subject: RE: [ActiveDir] Logon script with Admin rights Use the ZAP format. See KB 231747 below http://support.microsoft.com/default.aspx?scid=kb;en-us;231747 -----Original Message----- From: Harding, Devon [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 19, 2005 7:17 AM To: [email protected] Subject: RE: [ActiveDir] Logon script with Admin rights Unfortunately, this software is not a .msi format. Can this still be installed via GPO? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Za Vue Sent: Tuesday, July 19, 2005 10:09 AM To: [email protected] Subject: RE: [ActiveDir] Logon script with Admin rights Software installation from GPO works like a charm. Z.V. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, July 19, 2005 9:10 AM To: [email protected] Subject: [ActiveDir] Logon script with Admin rights How can I run a batch file logon script to map a drive and install an application on a user's PC as an Administrator? I don't want to expose the password using 'run as' Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469 ----------------------------------------- __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
