Logon script wont run unless the user is a local admin

[MarkGoodwin]

when a logon script runs from a NT4 DC on a win2k or XP client, the user doesnt (as default) have access to "all Users\desktop"

any way round this from the script point of view? ie run as a privilaged user. As i dont want to open up the access locally to my users.

I use / want to use this script to copy icons etc to users desktops.

the script is a simple
copy \\servername\icons\*.* "c:\documents and settings\all users\desktop\"

any help would be appreciated

Mark

 

[mwiner]

Well one thing I can think of because it sounds like you want to keep it semi-dynamic and that icons maybe be added or removed from \\servername\icons\ directory.

Copy the icons to use %username%\desktop and then on a log off script remove the icons.

That way if you decide later down the road that you need a new icon on the users' desktop you can just add it to \\servername\icons instead of having to rewrite the script.

Just becareful this way (if the user has any files on the desktop don't delete them). You can just del *.ico or something.

This way it will "refresh" the icon files everytime the user logs in and out.

Now if you wanted to copy to all users\desktop then you can use applications like su.exe (resource kit) to run the script as a privilaged user. But the issue there is typically you have to store the password in plaintext on the network. There may be new ones out that can encrypt it, but I don't know of any. (it has been a while since I have used su.)

 

[MarkGoodwin]

can you have a logoff script on a nt4 domain?
if so how.....

thanks