[Samba] how to get logon.bat run with Administrator rights in domain logons?

[Andrew Gaffney]

Urs Rau wrote:
> On win XP Pro workstations it would be so convenient if the domain logon 
> script which is stored on the samba pdc could be made to run with 
> Administrative (or System) privileges.
> 
> I know that I can interactively run another security context by choosing 
> "run as user" but how could I achieve this non-interactively and domain 
> wide whilst a "limited account" is loggin in?

I asked this same question on this list a while back. There is no way to interactively run 
a script as a higher user, otherwise virus writers could take advantage of this (as 
opposed to them currently taking advantage of stupid users and MS's stupid policy of 
making users Administrators by default). The logon.bat runs as the currently logged on user.

-- 
Andrew Gaffney
Network Administrator
Skyline Aeronautics, LLC.
636-357-1548