|
 |  |  |  |  |  |  |
| Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks. |
| |||||||
 |
| |
05-27-2009
| #1 (permalink) |
| | how to schedule a job or run a script with elevated privleges? Hi, I have a vbScript that checks Vista to insure that BitLocker is installed. Works great. However, I need to run this at least once a week on thousands of computers. My problem is that it requires elevated privleges to run. Any ideas on how to schedule a job or run a script with elevated privleges? |
My System Specs |
|
05-27-2009
| #2 (permalink) |
| | Re: how to schedule a job or run a script with elevated privleges? "OldDog" <mikef2691@xxxxxx> wrote in message news:9220a8e0-6da9-4f51-8a23-07cba8e034ae@xxxxxx Quote: > Hi, > > I have a vbScript that checks Vista to insure that BitLocker is > installed. Works great. > However, I need to run this at least once a week on thousands of > computers. My problem > is that it requires elevated privleges to run. Any ideas on how to > schedule a job or run a script > with elevated privleges? job then you can specify the account to be used. |
| My System Specs |
|
05-27-2009
| #3 (permalink) |
| | Re: how to schedule a job or run a script with elevated privleges? "OldDog" <mikef2691@xxxxxx> wrote in message news:9220a8e0-6da9-4f51-8a23-07cba8e034ae@xxxxxx Quote: > Hi, > > I have a vbScript that checks Vista to insure that BitLocker is > installed. Works great. > However, I need to run this at least once a week on thousands of > computers. My problem > is that it requires elevated privleges to run. Any ideas on how to > schedule a job or run a script > with elevated privleges? http://msdn.microsoft.com/en-us/libr...99(VS.85).aspx Note that UAC access token filtering does not affect domain accounts in the local Administrators group. I think this means you can use WMI to connect remotely and perform tasks requiring administrator privileges, as long as your account is a member of Domain Admins (this group by default is added to the local Administrators group when the computer is joined to the domain). You could create a script to run remotely on all computers in an OU (or in a group or all computers in the domain) in bulk using WMI. Or, such a script could copy a program (that runs silently) to each computer, run it, and then delete it. Other options might be WSUS and Group Policy (perhaps a startup script). -- Richard Mueller MVP Directory Services Hilltop Lab - http://www.rlmueller.net -- |
| My System Specs |
|
05-27-2009
| #4 (permalink) |
| | Re: how to schedule a job or run a script with elevated privleges? On May 27, 5:01*pm, "Richard Mueller [MVP]" <rlmueller- nos...@xxxxxx> wrote: Quote: > "OldDog" <mikef2...@xxxxxx> wrote in message > > news:9220a8e0-6da9-4f51-8a23-07cba8e034ae@xxxxxx > Quote: > > Hi, Quote: > > I have a vbScript that checks Vista to insure that BitLocker is > > installed. Works great. > > However, I need to run this at least once a week on thousands of > > computers. My problem > > is that it requires elevated privleges to run. Any ideas on how to > > schedule a job or run a script > > with elevated privleges? > Some of the issues are discussed in this article: > > http://msdn.microsoft.com/en-us/libr...99(VS.85).aspx > > Note that UAC access token filtering does not affect domain accounts in the > local Administrators group. I think this means you can use WMI to connect > remotely and perform tasks requiring administrator privileges, as long as > your account is a member of Domain Admins (this group by default is addedto > the local Administrators group when the computer is joined to the domain).. > You could create a script to run remotely on all computers in an OU (or in a > group or all computers in the domain) in bulk using WMI. Or, such a script > could copy a program (that runs silently) to each computer, run it, and then > delete it. > > Other options might be WSUS and Group Policy (perhaps a startup script). > > -- > Richard Mueller > MVP Directory Services > Hilltop Lab -http://www.rlmueller.net > -- OldDog |
| My System Specs |
|
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Forum | |||
| Schedule PowerShell script with Windows Server 2003 | PowerShell | |||
| script in logon with elevated privileges enables | PowerShell | |||
| How to schedule a Power Shell script | PowerShell | |||
| Removing Elevated Privleges | Vista security | |||
| How to schedule a Powershell script?? | PowerShell | |||
