up vote 2 down vote favorite
2
share [g+] share [fb]

I have a powershell script which executes after I logon to my account. This is done by a group policy logon script.

Because I am in the Administrator group this script is run with elevated rights which I don't want. I want it to run without the elevated rights and run it with the standard user access token. Is this possible and how can I achieve this?

UPDATE:

I need to have the script run with UAC virtualization.

Thanks in advance.

link|improve this question
Failing a more elegant solution, I suppose you could write a logon script that adds an entry into the RunOnce key so that Explorer will run the powershell. You'd probably need to make the logon script synchronous, to avoid a race condition. – Harry Johnston Dec 4 '11 at 0:44
@HarryJohnston Thanks for your alternative but I need to know if it's possible with a group policy. In the meantime I already use a other alternative: a scheduled task, but it also works from a batch file in my startup folder. – Martijn B Dec 5 '11 at 17:12
feedback

1 Answer

up vote 0 down vote

Use the -l option of psexec to launch your powershell script.

link|improve this answer
I tried your option but it doesn't give me the expected results. The -l option does run it without administrator rights but not with UAC virtualization. – Martijn B Dec 5 '11 at 16:42
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.