Re: Common tasks of script developer



the scripter's job is to make the complex simple.

first and formost there are the logon script(s). when you log onto a
domain computer, you want your drives mapped, your printers mapped,
audit run, etc. - all of this without the user hitting a key.

in my environment, management set a policy that "desktop support"
personel were supposed to check a dozen things and fix them if
nessessary. they sent out a 10 page document on what to check and how
to fix. not supprisingly, most of these things were not getting done. i
came up with a script that could do all of the checks and apply all the
fixes. this became the logon script for desktop support.

there is AD migrations (as someone already mentioned), and AD changes.
if your domain is large, it is inconcevable to make mass changes (like
changing the home drive letter for a list of 1000 users) by hand.
scripts handle this kind of job very well.

in my environment, user account creation is fairly complex. accounts
created by hand take about 10 minutes or so and have an error in them
about 25% of the time. accounts created by script are always correct
and are created in less than 1 minute.

.



Relevant Pages

  • Re: Disabling Interactive Logon Against Security Group
    ... A less that fully perfect route to consider would be a logon script ... for those accounts that inquires as to what machine is being logged ... question "disable interactive logon privilages against specific OU/User ... If you set this in a GPO then the list that is to be denied that you ...
    (microsoft.public.security)
  • Re: Using vbscript to set folder permissions and change security settings
    ... > script is actually a "dos" batch file. ... NET ACCOUNTS ... NET ACCOUNTS updates the user accounts database and modifies password ... password, logon limitations, and domain information. ...
    (microsoft.public.scripting.vbscript)
  • Re: Active Directory User Status
    ... > does not match with threshold then those accounts should get disabled? ... I run the script at a command prompt and redirect the output to a text file. ... You would need to hard code the criteria (the number of days in the ... past since the last logon). ...
    (microsoft.public.windows.server.scripting)
  • Re: Login Script not running on certain machines
    ... >> Have you modified the accounts in question to actually run the logon ... using the Profile tab for each user in the "Active Directory Users ... I specified the name of the script in the ...
    (microsoft.public.windows.server.scripting)
  • Re: Users last logon info from logon script
    ... I put this line in the users logon script: ... If I run the script manually, it shows the last logon time. ... I guess it is because Windows update the lastlogon attribute once a user ... Then, for each Domain Controller, ADO is used to search the ...
    (microsoft.public.security)