How to copy a file to users C:\Windows\system32 through Active Directory GPO

Question

Hi,

We want to configure screensaver through GPO, but we can't push .scr to end user C:\Windows\system32 folder. We run the copy command and it returned permission denied. So how should we configure GPO to let .scr file copy to the end user computer？

Answer 1

if you tried to use a LOGON script, unless your users have local admin permissions, that would fail.

instead, try to use a STARTUP script, this will execute as the $computer identity which has full permissions to itself so can succeed to copy the file to a privileged location.

if using GPP it needs to run under the ComputerConfiguration section, not the UserConfiguration section.

Answer 2

Hi,
Do you mean you want to use a script to copy a file to users C:\Windows\system32
When you run the command manually as standard domain user then you will receive permission denied error? Or you will receive the permission denied message when you update the GPO?
If you don't have the right to run the command manually, you may try the computer configuration (startup script)
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789196(v=ws.11)
Or the schedule task: https://www.faqforge.com/windows-server-2016/configure-scheduled-task-item-using-group-policy/
If you configure the schedule task for users under user configuration, you can give the user highest privileges to run the scripts:
https://www.faqforge.com/windows-server-2016/configure-scheduled-task-item-using-group-policy/

Best Regards,