Re: scripts on servers

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Mike Aubert (mikenews2_at_2000trainers.com)
Date: 02/17/04


Date: Tue, 17 Feb 2004 02:12:31 -0600

Group Policy can be used to apply startup and shutdown scripts to computers.
Here is an article that contains the necessary steps:

http://support.microsoft.com/default.aspx?scid=kb;en-us;322241

When you apply the scripts, be sure to store the scripts in a location that
is accessible to all clients. For example, click the "Show Files" button on
the scripts dialog box (see the above link to locate this in a GPO) and then
copy and paste your script into the folder that opens.

Now the question is - where to apply the GPO? If all the servers are in the
same organizational unit you can simply create a GPO linked to the
organizational unit (or use an existing GPO if one is linked to the
organizational unit).

However, if all your servers are not in the same organizational unit, and
applying the GPO at a high enough level would also effect workstations, you
can use security filtering. Here is more info on security filtering:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/filtering_the_scope_of_a_gpo.asp

and

http://support.microsoft.com/default.aspx?scid=kb;en-us;322176
(the How to Filter the Scope of Group Policy According to Security Group
Membership section)

You would basically use the following steps:

- Create a group called something like "Domain Servers"
- Add the computer accounts of all servers to the "Domain Servers" group
- Create a new GPO and apply it at a high level so it will apply to all the
servers (such as at the domain level)
- Remove the allow "Apply Group Policy" permission from the Authenticated
users group (but, do not deny)
- Add the "Domain Servers" group and allow the Read and the Apply Group
Policy permissions
- Configure the script in the GPO

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
mikenews2@2000trainers.com

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.

"juanb" <juanb.11rheb@mail.mcse.ms> wrote in message
news:juanb.11rheb@mail.mcse.ms...
>
> Hi !
>
> I have an windows 2000 net+Ad.
> I want to be able to run a script on all my 2000 servers.
> can i do that from one local location ?
> maybe using GPO to only the servers ?
>
> thanks
>
>
> juanb
> ------------------------------------------------------------------------
> Posted via http://www.mcse.ms
> ------------------------------------------------------------------------
> View this thread: http://www.mcse.ms/message399950.html
>



Relevant Pages

  • Re: Terminal Server GPO Issue
    ... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Server GPO Issue
    ... The name of the OU where the GPOs should not be applied is: Citrix XP ... They both sit at the same level under an OU called Servers. ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: TS Profile GPO setting not applying
    ... You need to enable loopback processing of the GPO, ... 260370 - How to Apply Group Policy Objects to Terminal Services ... > TS servers to security section of the GPO and also even tried ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal Server GPO Issue
    ... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain GPO for IE proxy settings
    ... > For a domain/OU level Group Policy the user account must reside in the ... > container/subcontainer where the user configuration is applied. ... >> All servers are in a OU called SERVERS. ... >> I created a GPO and made settings on "Internet Explorer Maintenance ...
    (microsoft.public.windows.group_policy)