I need to distribute a secret token to a group of users, where it would be stored in ODBC configuration in the password field (masked). The goal is to make it accessible for GPO script, but not viewable by users (to reduce chances of leaking).
My question is similar to this one, but as I understand, in that case users will be able to access the secret in the place where it is stored.
What is the best way of achieving that?