CODEWITHSUNDEEP
authenticationpowershelluac
John Bruckler
John Bruckler

Reputation: 122

Powershell DeElevate user token

I have a situation which I think isn't necessarily odd in an Enterprise environment...

We're migrating to Windows 7, and due to the whole split token madness that is UAC, our vbscript network drive script has broken. There's a decent explanation at http://pcloadletter.co.uk/2010/05/15/missing-network-drives/ with a vbscript solution that creates a scheduled task each time someone logs in in order to run the drive mapping script in a non-elevated context.

This seems kludgey to me. What I'd rather do is deelevate the logon script so that it runs under the standard user token, rather than the elevated token. The problem is, I'm not sure how to go about that, and hoping someone here might be able to assist.

Upvotes: 2

Views: 767

Answers (1)

Andy Arismendi
Andy Arismendi

Reputation: 52649

Not a direct answer (doesn't provide you a way to de-elevate the token) but this may be solution you need to have drives show up:

http://social.technet.microsoft.com/Forums/en/ITCG/thread/92db05ba-ff0d-4e73-b40a-78522bfab6aa

To configure the EnableLinkedConnections registry value, follow these steps:

  1. Click Start, type regedit in the Start Search box, and then press Enter.

  2. Locate and then right-click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

  3. Point to New, and then click DWORD Value.

  4. Type EnableLinkedConnections, and then press Enter.

  5. Right-click EnableLinkedConnections, and then click Modify.

  6. In the Value data box, type 1, and then click OK.

  7. Exit Registry Editor, and then restart the computer.

Upvotes: 1

Related Questions