One caveat to this - if you are going to be accessing a network resource, the default behavior is NOT to wait for the network stack to be initialized before completing computer startup. The obvious problem of not being able to AuthN the user or the computer against AD is handled via cached credentials, etc.
However - this behavior can be changed to force the system to wait for the network stack to be loaded, inited, and available before the policies are run. To do this, you will need to set: "\Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and logon" == enabled. This will noticeably slow down the appearance of the logon dialog, but nothing that your users will not get over in a very short period of time. The added delay is small, typically. In environments with 10s of GPO's to process - 5 second delay is what I've experienced. Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott Sent: Tuesday, July 19, 2005 12:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Logon script with Admin rights If you use a startup script, it will run as local system and be able to fully install. If, however, it NEEDS to be run as a user, this won't work. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Tuesday, July 19, 2005 8:10 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Logon script with Admin rights How can I run a batch file logon script to map a drive and install an application on a user's PC as an Administrator? I don't want to expose the password using 'run as' Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469 ----------------------------------------- __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/