Log-off Scripts in Windows 7

Question

I have Public machines that I need to run log-off scripts, which are in Perl. I want the script to run for a Standard user. It seems that the UAC is blocking this from happening. So, I have turned the UAC level to "never notify" which seems to be turning UAC off. But, still no dice. These scripts have to be ran at log-off!

Answer 1

UAC will block programs which need admin access.

If your perl scripts is asking for elevation, then for a standard user, even if UAC is off, Windows will ask for admin access (Behaviour similar to Windows XP).

What does the logoff script do? If it needs to run something that needs admin privilege, then you may need to write a scheduled task or a Windows Service that runs in Admin account to do that for you.

Answer 2

From your description it seems the script requires admin privileges to execute. Unless the script is launched from a process that has an admin token you will be prompted through UAC to elevate your privileges.

You can circumvent this limitation with a simple Windows service that runs as the LOCAL SYSTEM user and implements the OnCustomCommand() method.

From the logoff script have an executable that calls the ExecuteCommand() method passing a predetermined int which will act as a trigger for the service to perform the commands that require admin privileges.

private enum CustomCommands { RunAsAdmin = 128 };
ServiceController srvc = new ServiceController("SimpleService");
srvc.ExecuteCommand((int)CustomCommands.RunAsAdmin);

ServiceBase.OnCustomCommand Method