Running Powershell scripts pushed from AD GPO as admin on domain computers

Shehab

3/6/23, 1:32 PM

Needed some help getting a simple task done at work.

I have about 30 machines in my work domain that i want to run a power-shell script on at startup. I have created a GPO that runs the script on all machines at startup and all machines have the GPO applied successfully. The power-shell script is supposed to lookup a service on the machine and if it finds it, it starts it up and that's it. If the service does not exist, the script continues running and copies a file stored on a shared folder in the domain into the machine and then creates the service then starts it up.

MY PROBLEM: the script does not run automatically on all machines.

After some troubleshooting i found out that running scripts on the machines with the domain user logged in is not allowed and when i try to run the script manually on each machine i get an error that says running scripts is disabled, so i created a GPO that enables running scripts on the machines by enabling the Turn on Script Execution Policy. Regardless the script did not do it's job after restarting the machines and i still get the same error when i try manually. Then i tried to run the script manually as admin on the machines and the script performed it's work perfectly.

Also tried adding the following two commands -based on suggestions from other people having similar problems- in the beginning of the power-shell script, the first to elevate the script to run as admin and the second to allow running scripts on the machine and it did not make any change. COMMAND #1: start-process powershell –verb runAs COMMAND #2: Set-ExecutionPolicy RemoteSigned -Scope CurrentUser

Currently the number of device is going to get close to 200 and i need to get this script to run as admin on all machines from the applied GPO. Waiting to read some solutions from you shortly

Thanks in advance.

274

0 + 0

powershell

active-directory

group-policy

startup-scripts

administrative-privileges

ZivkoK

5/24/23, 8:03 AM

Is it a Startup script or a Logon script in your GPO? Also you should set the execution policy before executing the script...

Score:1

Server

Jevgenij Martynenko

3/6/23, 2:10 PM

Try this implementation approach:

Use GPO to run your script via Task Scheduler as SYSTEM, not a user
Give Domain Computers AD group access to a share for the script to be able to copy file from it

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Running Powershell scripts pushed from AD GPO as admin on domain computers

TH: การเรียกใช้สคริปต์ Powershell ที่พุชจาก AD GPO ในฐานะผู้ดูแลระบบบนคอมพิวเตอร์โดเมน

RO: Rularea scripturilor Powershell transmise de la AD GPO ca administrator pe computerele de domeniu

RU: Запуск сценариев Powershell, отправленных из AD GPO в качестве администратора на компьютерах домена

VI: Chạy tập lệnh Powershell được đẩy từ AD GPO với tư cách quản trị viên trên máy tính miền

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.