Am I getting something wrong?
I always thought logon scripts run nuder the user account
and startup
scripts prior to logon
run under system?
Regards
Stefan Walther
-----Ursprüngliche Nachricht-----
Von: Murad Talukdar [mailto:talukdar_m subway.com]
Gesendet: Donnerstag, 9. März 2006 07:35
An: 'Murad Talukdar'; focus-mssecurityfocus.com
Betreff: RE: user logon script context....
Okay a further google showed me the answer--but some
clarification would be
great-can logon scripts be set to run under a chosen
context?
Ie, if I don't want it to run under either SYSTEM or
localadmin, can this be
done? (I get the feeling this could be no).
Regards
Murad Talukdar
-----Original Message-----
From: Murad Talukdar [mailto:talukdar_msubway.com]
Sent: Thursday, March 09, 2006 4:31 PM
To: 'focus-mssecurityfocus.com'
Subject: user logon script context....
Hi guys,
Can anyone point me to a paper detailing what security
context a User logon
script runs under?
I want to know what kind of permissions a script(well, I
understand that it
doesn't have permissions itself but runs AT a certain level
of access) has
when that user logs one.
For instance, if the user is just a restricted user locally,
should I be
able to call a .exe in the script which loads and writes to
the c drive? All
this to be done through a GPO.
Kind Regards
Murad Talukdar
------------------------------------------------------------
---------------
------------------------------------------------------------
---------------
------------------------------------------------------------
---------------
------------------------------------------------------------
---------------
|