We are using RIS and kixtart scripts to load machines. When the machine is loaded it performs a GUIRUNONCE section in which we call a script that installs the MSI packages. The issue is the script is running as the local administrator and we would like to query AD to find the machine account and its description. The description contains the user profile name that is used to load all software for that user. The issue is that the local administrator account does not have access to query AD. It needs a valid AD user account credentials to even query it. Of course we do not have access to the administrator account and would not use the AD administrator account for this.

We have a script that will work when logged on to AD on the machine, but during the machine build process it is using the local administrator account.