|
CLARIFICATION......(I thought it was pretty clear, but I guess not)
Consider two users:
JDOE (Real Human User)
LOGONSVC (Service account I created)
JDOE is a member of "SALES" Group
LOGONSVC is not a member of "SALES" Group.
User "JDOE" is logging in to his PC and running the logon script. At that time, InGroup("SALES") will be TRUE. and %USERNAME% will be "JDOE". But JDOE doesn't have admin rights to his PC, so to do anything really neat, I need to elevate the privilege of the logon process.
If I RUNAS /user:LOGONSVC, then all of the sudden InGroup("SALES") is FALSE and %USERNAME% is "LOGONSVC" because Kix is running under the context of the user "LOGONSVC".
I understand that I can split this up into a "User Space" script and an "Admin Space" script, and pass the needed information between them, but was just wondering if anybody had come up with a really slick way of doing this a little more clean????
| 
