Page 1 of 1 1
Topic Options
#125140 - 2004-08-17 11:33 AM need admin access - no su service
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
Greetings,

I need to create a script that will run with administrator permissions to make local system changes at logon. However, the workstation does not have su services running and we won't run a script with passwords in the clear.
I am thinking of making a kix script and then adding it to smsInstaller to compile the script which we can embed the local admin password. Only problem is how to get it to run without su services???
any suggestions?
_________________________
John
LM Contractor
One of the 2 dads

Top
#125141 - 2004-08-17 12:00 PM Re: need admin access - no su service
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
How about SWAP - Start With Admin Powers ?
_________________________



Top
#125142 - 2004-08-17 12:43 PM Re: need admin access - no su service
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
i will look into this...
we could push the initial scripts to the workstations with SMS and use kix to execute them.
only thing is this will happen at logon time. our small project is to check the username at logon with an online database. This database will dictate what devices (cd-rom, floppy, etc) the user has access to. The logon script would then make the adjustments to the workstation by opening the respective devices for that user.
(yes, this could be done in a win2k centric world, but we are stuck with NT PDC/BDC at the moment).
_________________________
John
LM Contractor
One of the 2 dads

Top
#125143 - 2004-08-17 12:56 PM Re: need admin access - no su service
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
SWAP runs with local system so no network connections are available.
You could however get the info during logon proces, dump in c:\swap\temp in a .txt and let a SWAP script read the .txt to see if floppy etc. should be disabled.

Why not use system policies to deny access to A: etc. depending on group membership??? Much easier...

_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#125144 - 2004-08-17 01:52 PM Re: need admin access - no su service
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
we are limited on group memberships allowed to be created on the local workstation...though this is something to consider. This would cause the logon script to double check the user at each logon. If they are approved a device and later the device is revoked, the logon script will have to remove the user from the group.
_________________________
John
LM Contractor
One of the 2 dads

Top
#125145 - 2004-08-17 02:21 PM Re: need admin access - no su service
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
I believe there are a number of options talked about here - Installing an Application as an Admin

HTH,

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#125146 - 2004-08-17 02:48 PM Re: need admin access - no su service
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
If you use SMS then you should have no problem getting admin rights for install. That's what SMS is for.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#125147 - 2004-08-17 04:02 PM Re: need admin access - no su service
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
yes....you are correct to a certain extent.
SMS is good for running things from a push, but i have yet to figure out how to get SMS to interact with the logon process (and use kix since it is easier than vb)
_________________________
John
LM Contractor
One of the 2 dads

Top
#125148 - 2004-08-17 10:23 PM Re: need admin access - no su service
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11631
Loc: CA
Why don't you specify exactly what it is you're wanting to change. The SMS should have full admin rights to modify anything it wants to. Why does it need to be interactive?

With more specific details and what it is you're wanting to change we might be able to suggest an appropriate solution better.

Top
#125149 - 2004-08-18 05:26 AM Re: need admin access - no su service
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
You could also use remote admin scripts to perform the tasks. However, you'd need to be more specific if you expect us to be more precise with answers.
_________________________
There are two types of vessels, submarines and targets.

Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 302 anonymous users online.
Newest Members
Sir_Barrington, batdk82, StuTheCoder, M_Moore, BeeEm
17886 Registered Users

Generated in 0.058 seconds in which 0.025 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org