Hi Guys, I need some assistance regarding logon scripts for users. We are converting as much as we can to GPOs. However, there are alot of conditional checks that need to remain so the logon script is the best way to handle it. Unfortunately, I think the UAC is fighting us on things and I would like to know how I can run my logon scripts under the administrator token so that my users can copy / merge registry keys / map network drives / etc.. without issues. We are still in the works with upgrading our DCs from 2003 to 2008. The ETA is unknown.

Hi, I would like to verify the symptom of the issue. Does the users could not run this logon scripts? If the logon scripts are pushed by GPO, they should run with a high privilege. You can simply create a task scheduler to run the script at logon, and in task scheduler\create task\general, set security options to use administrator when running the task. Select both “Run whether user is logged on or not” and “Run with highest privileges”. Hope that helps. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Did your issue solved? Please feel free to give me any update. Thanks. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Leo, It seems to be counterproductive to have logon scripts that cant run with the appropriate rights needed to accomplish the task. The reason we will still need logon scripts is for flexibility with our checks. Not all users will run it, not all computers will need it. Therefore, we would like to have a logon script that will not need a workaround. How do we provide elevated rights so that we can control the Start Menu, etc...? Restructuring OUs are not viable at this point since that is still being reviewed by a Contracted Company. Mark

Can someone else chime in? We have a Windows 7 Upgrade Project and I am getting nowhere with these script conversions.

Hi, Sorry for my late reply. Base on my understanding, you want to elevate the right to run the logon script. I hope these links will helpful to you: How Can I Run a Script Under Alternate Credentials? How Can I Use the RunAs Command to Run a Script Under Alternate User Credentials? Hope that helps. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Did your issue solved? Please feel free to give me any update. Thanks. Regards, Leo Huang TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Neither of those recommendations would be a possible solution. As I've noted, it is a login script that needs "elevated rights", not alternate credentials.