This would run far more quickly and again, target the DC - usually the "closest" server to the endpoint. Rarely any legit need to copy the files to the local computer. Also - when copied locally, the logic can be exposed if the laptop is stolen or compromised.
Note that if you're running an older version of Kix32.exe, the @PRODUCTTYPE macro may not properly reflect the newer O/S versions, resulting in mixed results. It's the one macro we basically never use, instead pulling data directly from the local machine's registry.
_________________________ Actually I am a Rocket Scientist!
