[Samba] Administrator-privileged logon scripts under limited modeon XP?

[Mitch (WebCob)]

> -----Original Message-----
> From: samba-bounces+mitch=webcob.com at lists.samba.org [mailto:samba-
> bounces+mitch=webcob.com at lists.samba.org] On Behalf Of Hunter Rognstad
> Sent: March 2, 2005 10:38 AM
> To: samba at lists.samba.org
> Subject: [Samba] Administrator-privileged logon scripts under limited
> modeon XP?
> 
> However, clever use of the login.bat, as bad as it was to do it, was
> used to run things with administrator level privileges under Windows 98,
> such as installing certain updates or programs automatically, removing
> certain common spyware programs, copying useful utilities such as putty,
> gnugrep and vncviewer to a system directory for purposes of running from
> the $PATH, regedit'ing registry keys, etc. The login.bat under Windows
> XP, however, runs with user level privileges, which is in limited mode,
> meaning there's only so much I can do with it.
> 
[Mitch says:] I think your users can be local admin's while being on the
domain login, but it requires enabling that on each workstation - if that's
what you want to do - as for elevating privileges of a login script, I think
it's impossible - I looked into scripting the runas tool and was told it was
intentionally impossible.

A work around I am playing with is writing a service running locally as
"admin" to accept certain commands and options from non-admin users and
execute them, returning results over a pipe...

Sort of off topic, but I share your grief ;-)

m/