Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

More specifically…

I would like to create a policy that runs a login script to copy a file from a share to a local folder.

What account do I need to grant access to on the share in order for the logon script to get the file?

share|improve this question
up vote 1 down vote accepted

If you're applying the script as part of the computer startup, you need to grant access to the computer object on the share (you can add a computer to a group just like a user account, as they are both valid objects that can authenticate on the domain).

If you're running the script at user logon, it runs under the user's own security context, so you users will need to be able to access the remote location you host the file from, and have access to the local folder on the machine that you want to copy to.

If you can't grant your user access to both of those locations, it's usually preferable to run the copy from the machine startup script, instead of the user logon.

share|improve this answer

User logon scripts run under the user's context (the user logging on, to which the User Configuration settings (including the logon script) in the GPO are being applied).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.