Windows Forum

Ask something
Discussion Locked

Logon script w/ Permission Edit Registry

0 helpful
7 replies

by ksearch 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a logon script that copies new virus dat files to a users machine and then updates the virus software. However, users do not have permission to edit the registry, so the script fails. how can I run this script with permission to edit the registry, but not leave users with this permission? Thanks for any enlightenment.

7 replies

by maxwell edison

Here is a possibility.

With Windows Script Host (WSH) you can manage the system registry.

The WSript.Shell object provides functions to read system information and environment variables, work with the registry and manage shortcuts.

Links:
http://www.winguides.com/scripting/reference.php?id=109

http://www.winguides.com/scripting/reference.php?category=3

http://www.microsoft.com/msdownload/vbscript/scripting.asp

http://msdn.microsoft.com/library/default.asp?url=/nhp/Default.asp?contentid=28001169

(REMOVE SPACES from the pasted URL.)

Maxwell

by jlaar

What OS do you use? In w2k you have the option to run a program/batch/script with the "run as" option (e.g. run as administrator). In winnt you can use the same by using the resourcekit tool su.exe. On every workstation you also must have installed the accompanying service first. All info on its use is with the su.exe tool.

by joseph moore

I usually don't have any problems pushing a REG file onto a user system through their logon script.
For example, say you have a file called WEBSITE.REG that contains the following:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyOverride"="*.mydomain.com"

Now, I want to push this onto user systems in their logon scripts. To do that, I put the REG file in the Netlogon share on my PDC, then I put the following in the logon scripts:

REGEDIT /S WEBSITE.REG

That is it. It silently pushes the REG contents into the Registry on the user systems. And I have done this, and it works for normal users (with normal rights).

hope this helps

by ksearch

Unfortunately, this is an executable that modifies the registry, not just pushing a registry entry, so it does get snagged by permissions. You're correct in your reply, it just won't work here. Thanks, though.

This discussion is closed to new replies.