Well, its not during the logon process, but yes, academically, you are correct. If you have the ability to write to a GPO (i.e., edit the GPO) then you have the ability to modify one of the ADM files that are loaded within it by simply touching the local copy prior to running GPEditor. But again, this assumes you have the ability to write to the GPO in the first place, in which case, there are a lot of other things you can do :)
Darren Mar-Elia www.gpoguy.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of AdamT Sent: Monday, April 24, 2006 9:08 AM To: [email protected] Subject: Re: [ActiveDir] ADM files / sysvol management On 4/24/06, Darren Mar-Elia <[EMAIL PROTECTED]> wrote: > Graham- > GP Editor will always download the ADM files that already exist within > the ADM folder in SYSVOL, unless there is a version of an existing ADM > file on the local c:\windows\inf folder that is newer. On an ... ahem... academic note.... At what point during the logon process does the GP editor check for this? Could I craft my own ADM files (or create invalid or blank ones), and use something like touch.exe to give them an up-to-the-minute timestamp, and have those loaded instead of the ones the network administrator had in mind? -- AdamT 'Thank-you for not requesting read receipts' List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
