Permissions for logon scripts - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Permissions for logon scripts

Page 1 of 1

1

Topic Options

#21286 - 2002-05-07 12:59 AM Permissions for logon scripts
gmansc gmansc Lurker Registered: 2002-05-06 Posts: 2 Loc: Arizona	I'm running McAfee VirusScan on my clients and am trying to create special scan jobs on the clients to do full scans for viruses etc. I created the job with VirusScan and exported its associated registry entries to a file. Then we run a logon script that imports the job to each computer with the following command (so it will run automatically): IF INGROUP("Domain Users") SHELL "regedit.exe /s %logonserver%\netlogon\day.reg" ENDIF It functions correctly for me (administrator) but not for the regular “domain users” because they don’t obviously don’t have the appropriate permission. The day.reg file writes to the HKLM\Software\Network Associates key. Is there away around this? Advice would be very much appreciated.
Top

#21287 - 2002-05-07 01:52 AM Re: Permissions for logon scripts
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	Hello gmansc and welcome to the board. Which came first? The chicken or the egg? Try searching the board for the word SU This is a resourcekt for doing that. Also search for Scheduled Tasks and this UDF SCHEDULETASK() - Schedules a task on any computer using the Task Scheduler Otherwise other possiblities are GPO on Windows 2000 AD or 3rd party apps such as the new ScriptLogic [ 07 May 2002, 01:53: Message edited by: NTDOC ]
Top

#21288 - 2002-05-07 02:45 AM Re: Permissions for logon scripts
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	hmmm, we just did something very similar a few months back, if memory serves, for NT, we used SU to disable the avsynmgr service (we just issued a net stop). then we were able to regedit import the reg file not problems. I remember thinking that it was odd there were no permissioning issues with the McAfee keys in HKLM, but if you actually check them, users do have special access. then we issued another SU to restart the avsynmgr service. if you don't disable this service, mcafee will revert any reg pokes back to the original settings (after a minute or two) ... yeah, do I have that right ? -Shawn [ 07 May 2002, 02:48: Message edited by: Shawn ]
Top

#21289 - 2002-05-07 03:17 PM Re: Permissions for logon scripts
BrianTX BrianTX Korg Regular Registered: 2002-04-01 Posts: 895	You're right, Shawn.. Whenever VirusScan is stopped, the settings are written to the registry. Whenever it is started, the settings are pulled from the registry. So, yuo have to stop the services then import your settings, then restart the services. Unfortunately, you must have sufficient rights to do this. Another possibility on changing settings: If you have autoupgrade set so that it updates from a site you control, you can create your own setup.exe that stops the service, enters your settings, and starts the service. This allows us to make changes to NT machines once a month when we dod the AutoUpgrades because AutoUpgrade runs in the system account. Brian
Top

#21290 - 2002-05-07 11:14 PM Re: Permissions for logon scripts
gmansc gmansc Lurker Registered: 2002-05-06 Posts: 2 Loc: Arizona	Guys thanks. Based on your responses I've looked into the su utility. It appears that a service has to be installed instead of applying an "active window" with permissions like the "run as" service in windows 2000. Are you familiar with a way to modify su or of another way to apply permissions w/o a full scale roll out of that service? Thanks again. Greg
Top

#21291 - 2002-05-08 12:44 AM Re: Permissions for logon scripts
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	Greg, Yes, take a look at the Schedule Tasks idea
Top

#21292 - 2002-05-21 11:25 AM Re: Permissions for logon scripts
MCA MCA KiX Supporter Registered: 2000-04-28 Posts: 5152 Loc: Netherlands, EU	Dear, Also a welcome to this board. Take also a close look at page http://www.utdallas.edu/~pauls/scripts.html (input by KDyer) which handle McAfee without Management Console or ePolicy Orchestrator. Take also a close look at our topic http://81.17.37.55/board/ultimatebb.php?ubb=get_topic;f=2;t=000534 which handle about McAfee inventory specially for 4.x release. greetings. _________________________ email scripting@wanadoo.nl homepage scripting@wanadoo.nl \| Links \| Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA \| FAQ & UDF help file UDF kixtart.org library collection mirror MCA \| mirror USA \| mirror europe UDF scriptlogic library collection UDFs \| mirror MCA
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

1 registered (Allen) and 581 anonymous users online.

Newest Members

fgarcia, Viginette, ManuvdWielNL, Sir_Barrington, batdk82
17889 Registered Users

Generated in 0.053 seconds in which 0.023 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking