samba - Apr 2004 - how to get logon.bat run with Administrator rights in domain logons?

On win XP Pro workstations it would be so convenient if the domain logon script
which is stored on
the samba pdc could be made to run with Administrative (or System) privileges.

I know that I can interactively run another security context by choosing
"run as user" but how could
I achieve this non-interactively and domain wide whilst a "limited
account" is loggin in?

Thanks for any pointers.

Urs Rau

Urs Rau wrote:
> On win XP Pro workstations it would be so convenient if the domain logon 
> script which is stored on the samba pdc could be made to run with 
> Administrative (or System) privileges.
> 
> I know that I can interactively run another security context by choosing 
> "run as user" but how could I achieve this non-interactively and
domain
> wide whilst a "limited account" is loggin in?
I asked this same question on this list a while back. There is no way to
interactively run
a script as a higher user, otherwise virus writers could take advantage of this
(as
opposed to them currently taking advantage of stupid users and MS's stupid
policy of
making users Administrators by default). The logon.bat runs as the currently
logged on user.

-- 
Andrew Gaffney
Network Administrator
Skyline Aeronautics, LLC.
636-357-1548