Is it possible to have a script that a teacher runs that needs admin rights?

[reggiep]

We currently have a script that enables exam users and another to disable them. Currently we run it on request from the teacher. We are trying to figure out a way that we could pass this to the teacher to do.
The teacher doesn't have rights to run the vbs that attaches via LDAP to enable or disable the ou of users.

Is there a way we could run a batch file at log in for that user that would call the vbs with the correct privileges or another method maybe?

[TheLibrarian]

Active Directory Users and Computer, Delegate Control wizard.

After giving the appropriate rights have been delegates I'd set up a simple command shell script using dsquery and dsmod to list the accounts and enable / disable them.

[themightymrp]

If you delegate control to staff on the OU to allow them the ability to enable/disable accounts, surely your script would then work when logged on as a teacher?

[reggiep]

Thanks guys.
I can't believe how complicated I was trying to make that!

All working now.

[TheLibrarian]

You were too close to the issue to see the easy solution.

I was caught out in the same way here when I was looking at WMI filtering some GPO's to differentiate between Windows 7 with and without APP-V.