Re: Login Script

From: Herb Martin (news_at_LearnQuick.com)
Date: 12/20/04 

Date: Mon, 20 Dec 2004 10:27:12 -0600

"scott" <sbailey@mileslumber.com> wrote in message
news:#rT$cjp5EHA.828@TK2MSFTNGP14.phx.gbl...
> what about a group instead of a user?
>
> what would that look like syntax wise?

Let's go back to your original request and consider
what you really wish to accomplish:

> I'm trying to add the current user (member of DOMAIN USER GROUP) to the
> LOCAL ADMINISTRATORS group with below code in FIGURE 1, but get error in

IF someone should be a member of the Local Admistrators
group then YOU (or a script on the DCs) should be adding
them to the appropriate group.

This isn't appropriate for a Startup or Logon script.
(The user cannot add himself nor can the computer startup
add a user who has not yet logged onto the computer -- as
discussed above)

If ALL users should be Admins of ALL machines (which
is essentially what you were really going to allow -- If
I COULD log onto a machine you were going to make me
an Admin -- then just do that by making such a group or
assigning the Domain Admins.

Although I see this, and the original request, as poor
practice, you likely also will likely also recognize this
when stated as such.

We could build a Startup script that would do this IF
you can identify the users who work at each machine. 

-- 
Herb Martin
"scott" <sbailey@mileslumber.com> wrote in message
news:#rT$cjp5EHA.828@TK2MSFTNGP14.phx.gbl...
> what about a group instead of a user?
>
> what would that look like syntax wise?
>
> "Deji Akomolafe" <noemail@akomolafe.dotcom> wrote in message
> news:ekX8Kyl5EHA.2428@TK2MSFTNGP14.phx.gbl...
> > Ah, you are correct. Missed that :(
> >
> > -- 
> >
> >
> > Sincerely,
> >
> > Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
> > Microsoft MVP - Directory Services
> > www.readymaids.com - we know IT
> > www.akomolafe.com
> > Do you now realize that Today is the Tomorrow you were worried about
> > Yesterday?  -anon
> > "Herb Martin" <news@LearnQuick.com> wrote in message
> > news:eXWiZji5EHA.2540@TK2MSFTNGP09.phx.gbl...
> >> "Deji Akomolafe" <noemail@akomolafe.dotcom> wrote in message
> >> news:uDSajUi5EHA.2624@TK2MSFTNGP11.phx.gbl...
> >> > the variable is %username%. So your syntax would be:
> >> >
> >> > net localgroup administrators yourdomainname\%username% /ADD
> >> >
> >> > That would add ANY user that logs into the computer into the
> >> administrators'
> >> > group IF you are using Machine Startup Script through a GPO as
> >> > suggested
> >> by
> >> > Oli. This may be something you want to do in a controlled fashion.
> >>
> >> Sorry, this will not work as expected.
> >>
> >> At the time that a Computer Startup Script runs, there is
> >> NO user and the %username% variable is holds no value.
> >>
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Re: Login Script
    ... what you're trying to do is not a good practice. ... in at the console) to the local administrators group. ... a computer startup script is ...
    (microsoft.public.win2000.active_directory)
  • Re: Probleme mit Software-Installation (MSI)
    ... funktionieren, als man durch anklicken der *.msi eine Installation ... Erstelle mal ein Computer Startup Script mit einem der nicht funktionellen ... Pakete und protokolliere die komplette Installation. ...
    (microsoft.public.de.german.windows.server.active_directory)
  • RE: Upgrading elements of Office 2003 to 2007 using AD / GPO
    ... to install the software with the relevant .msp file as a modifier? ... you can configure the Feature Installation States and Removal ... GPO startup script to "emulate" the process: ... Use Group Policy to assign computer startup scripts for 2007 Office deployment ...
    (microsoft.public.office.setup)
  • Computer Startup Script without network connection.
    ... I have some laptops which I want to run a computer startup script on. ... the computer has an active network connection. ...
    (microsoft.public.windows.group_policy)