Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to view which logon script is running for an AD user without having domain admin rights.

I've tried gpresult and it isn't displaying any login/logoff scripts, but I believe the script is configured under the user's Profile tab in AD Users&Computers.

Are there any events logged I could refer to, or does this logon script get stored locally by chance?

share|improve this question
up vote 6 down vote accepted

In PowerShell:

Import-Module ActiveDirectory
Get-ADUser MDMarra -Properties scriptpath | Select scriptpath

In cmd:

dsquery user -samID MDMarra | dsget user -loscr

This will return the path of the logon script set in the Profile tab of ADUC.


Just install ADUC on your workstation and look at the Profile tab for the user in question. You don't need to be a domain admin to view objects in ADUC.

By default, you can view this attribute for all users in your domain without having Domain Admin rights.

share|improve this answer
Thank you for this, I originally used another VBScript to access the same info, but this worked too. – MarkF May 13 '13 at 15:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.