Page 1 of 1 1
Topic Options
#2357 - 2000-04-04 01:22 PM NT Rights Question
Anonymous
Unregistered


I have a 130 NT Workstaions all members of the domain. None of my users have local admin rights. Am going to have a problem modifying the registry of my workstations in the logon scripts using Kixtart.

Thanks

Top
#2358 - 2000-04-04 03:09 PM Re: NT Rights Question
Anonymous
Unregistered


Yes you are.

I ran into the same problem myself, and have yet to figure out a way around it. I am looking for a way to run a program AS a different user (eg. administrator) but I've found nothing useful yet.

Perhaps the next version of Kix will have a provision for it...

Top
#2359 - 2000-04-04 07:38 PM Re: NT Rights Question
Anonymous
Unregistered


I haven't tested it, but maybe this is possible...

Use @ipaddress to get the ip address of the local workstation. You will then need to use a script to condense this ip address to a usable format (ie from 222. 2. 2. 2, to 222.2.2.2). Someone else will have to help with how to do that.

Let us call the usable ip address $ip.

shell '%comspec% /c "net use \\$ip\ipc$ /u:administrator password"'

shell '%comspec% "REG ADD RegistryPath=Value [DataType] \\$ip"'


Ass I said, I haven't tested this, so what I've just said may be a load of crap. However, the same idea does work when changing permissions on files even though users don't have access to those file.

BIG PROBLEM though. Huge security issue. If users know about the file they can see what the admin password is. Your call!!

Ian

Top
#2360 - 2000-04-04 07:42 PM Re: NT Rights Question
Anonymous
Unregistered


PS Reg.exe is in the Resource Kit.
Top
#2361 - 2000-04-05 01:08 AM Re: NT Rights Question
Anonymous
Unregistered


Hy I had the same problem and I had done a little bit testing.

The tool su (Resource kit)should solve your problem, but the handicap is, that before you can use it , you must first install the service on all machines with administrative rights. If this is done su can do all the work for you.
The way I have tested it was the following:

- Install the SU Service on the worktations
- Then via a login script the su command can run with the domainadminaccount and execute your commands. Type the commands into a batch file
- To ensure that the user can not read the password which is needed for the su command in the batch convert the batch to a .com file using bat2exec.

Now you can run jobs with administrative rights on workstations without the need, that the users have administrative privileges.

Regards Dirk Hatzmann

------------------

Top
#2362 - 2000-04-05 10:24 AM Re: NT Rights Question
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
dhatzmann, i have done that exact same testing and you are right. the problem is that you have to get su running on all of your nt computers, this script may be of some help.
http://www.neosoft.com/~brycel/kix/other_scripts/su/

the script that you want is su_install.kix.

where can i find the bat2exe command?

Bryce

Top
#2363 - 2000-04-05 10:50 AM Re: NT Rights Question
Anonymous
Unregistered


Bryce,
I downloaded the script and suss.exe file. Where can I get the xnet file?

Thanks

Top
#2364 - 2000-04-05 10:53 AM Re: NT Rights Question
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
xnet.exe came with your download of kix32.

Just copy xnet.exe in to your %systemroot%\system32 directory.

Bryce

Top
#2365 - 2000-04-05 10:55 AM Re: NT Rights Question
Bryce Offline
KiX Supporter
*****

Registered: 2000-02-29
Posts: 3167
Loc: Houston TX
also i just added it to my web site.
http://www.neosoft.com/~brycel/kix/kix_tools/

Bryce

Top
#2366 - 2000-04-05 01:05 PM Re: NT Rights Question
JoshW Offline
Fresh Scripter

Registered: 2000-04-04
Posts: 31
Loc: Moline, Il 61265
Bryce,

WHERE TO GET A BAT2EXE PROGRAM
If you're looking for a BAT2EXE program, Robert Butler suggests a couple of places to start looking. Read the post in our KiXtart board ... http://www.extracheez.com/Boards/message.asp?msg=16090

------------------
Josh
Test & Integration

_________________________
Josh

Top
#2367 - 2000-04-06 11:30 AM Re: NT Rights Question
cj Offline
MM club member
*****

Registered: 2000-04-06
Posts: 1102
Loc: Brisbane, Australia
I did this for no reason - I hope it helps someone:

code:

$t=""
while $i<15
if substr(@ipaddress0,$i+1,1)<>" "
$t=$t+substr(@ipaddress0,$i+1,1)
endif
$i=$i+1
loop


This will give you $t, the IPADDRESS0 without the spaces.

cj

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 5139 anonymous users online.
Newest Members
fgarcia, Viginette, ManuvdWielNL, Sir_Barrington, batdk82
17889 Registered Users

Generated in 0.153 seconds in which 0.123 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org