copying files to system32 directory problem

[fuunstatic]

I have configured a login script (batch file type) to copy a file to the system32 directory of every XP pc

however the users logging in are only members of "domain users" and so do not have any rights to add a file to the windows\system32 directory of their XP PC

The file I am copying is the ifmember.exe needed for group membership checking in the login script

Is there a way to overcome eg give the user elevated
privileges via the login script

any help or pointers would be much appreciated
thanks
Immacola "Work to live, don't live to work"

"The problem with troubleshooting is that sometimes it shoots back"

 

[Aslamvs]

hi,

It possible to give permissions for temp time usig cacls or xcacls.exe using this exe you can temperaraly give the permissions to user in your batch file then at the end of the batch revert the permissions uisng same exe . ie cacls or xcacls

see
cacls /? for more help

Or another way is use su.exe . this super user for windows

using this you can use you id that is administrator id to copy the files in the system32 directory.

both the files are from res kit. and easily available at microsoft's site.

HTH Aslam

 

[fuunstatic]

thanks I will try both "Work to live, don't live to work"

"The problem with troubleshooting is that sometimes it shoots back"

 

[fuunstatic]

Hi

su.exe was too much of a security risk

used xcalc instead to change the permissions on a directory of a pc. The only problem is that it works if you login as a domain admin user and not as an ordinary user (makes sense as using this tool would enable any user to change permissions all over the place)

as my login script is intended for ordinary users, do you have any other suggestions? "Work to live, don't live to work"

"The problem with troubleshooting is that sometimes it shoots back"

 

[Aslamvs]

hi,

use Su.exe for super user and then try to change the permissions over the direectory. You can call a batch file cntaining SU inoformation in your login script then use cacls.exe for changing the permissions. I think this is only the possibility to change the folder permissions in login script.

HTH Aslam

 

[Aslamvs]

Hi,

For using su command more effectively try to use this syntax

e.g.
su.exe username &quot;command&quot; england winsta0\default < c:\username.txt

This command will execute the command you specified with username as username domin england and password from &quot;username.txt&quot;

Check out this link for more referance

http://www.tburke.net/info/reskittools/topics/su_schedule.htm#envex

HTH Aslam

 

[fuunstatic]

thanks i think it will work but still a security risk as it exposes an admin userID and password for those that know where to look

I may have to approach this froom another angle &quot;Work to live, don't live to work&quot;

&quot;The problem with troubleshooting is that sometimes it shoots back&quot;

 

[bjoernf]

Have you tried using group policy to run the script? Scripts in &quot;user configuration&quot; run with the security settings of the user logging in to the workstation, but I remember having read that the scipts in &quot;computer configuration&quot; runs with the permissions of the local system account, or at least as a user with more elevated privilegies than a domain user.

 

[fuunstatic]

I have only tried the script as user config in GPO but I will try out the comp config way

thanks &quot;Work to live, don't live to work&quot;

&quot;The problem with troubleshooting is that sometimes it shoots back&quot;

 

[fuunstatic]

the config way worked

just what I needed thanks &quot;Work to live, don't live to work&quot;

&quot;The problem with troubleshooting is that sometimes it shoots back&quot;