On win XP Pro workstations it would be so convenient if the domain logon script which is stored on the samba pdc could be made to run with Administrative (or System) privileges.
I know that I can interactively run another security context by choosing "run as user" but how could I achieve this non-interactively and domain wide whilst a "limited account" is loggin in?
I asked this same question on this list a while back. There is no way to interactively run a script as a higher user, otherwise virus writers could take advantage of this (as opposed to them currently taking advantage of stupid users and MS's stupid policy of making users Administrators by default). The logon.bat runs as the currently logged on user.
-- Andrew Gaffney Network Administrator Skyline Aeronautics, LLC. 636-357-1548
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
