Re: Startup Bat File

So ... Should i have a group with computers or users.. I'm thinking I need to
change it to users. It's currently using a universal security group of
computers but I have not seen it run and it isn't giving errors anymore in
the application log.

So changing it to the user, it won't matter what computer they log into, it
should run the bat file associated with their domain account correct? I am
going to remove the computer group and just add people individually to the
security of the policy until I get it working correctly. (Namely my own
domain account)

Kelli

"Dave Stoecker" wrote:

Inline...

"Kelli" <Kelli@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:91E591B6-3D67-4609-B26F-E612F93E43A4@xxxxxxxxxxxxxxxx
Here is what my script is doing ...

@Echo off

REM Copy General.ini file into users directory, this fixes the print as
image and adding custom paper sizes

Copy "\\dpprojects\setup\IT Documents\GroupPolicySource\Nitro\general.ini"
"C:\Documents and Settings\%username%\Application Data\Zeon\DocuCom\PDF
Driver" /Y

REM Copy pluscore.ini file into users directory, this fixes rotate/center
and removes the organization box on startup

Copy "\\dpprojects\setup\IT
Documents\GroupPolicySource\Nitro\pluscore.ini"
"C:\Documents and Settings\%username%\Application Data\Zeon\DocuCom\PDF
Plus"
/Y

So it looks like it needs to be moved to the logon script within the user
configuration instead. I will give that a try and let you know.


Yes, that way your %username% variable will grab the name of the user who is
logging in.

Does my copy line look right, and I want the REM line to be a 'comment'
line
but it doesn't seem to be working. I wrote the bat file in notepad.

Those look fine, assuming each is on one line (my newsreader is wrapping
them) and the destination path already exists.
Is it that you are seeing the command window when a user logs in, or are you
getting an error?



Kelli


"Dave Stoecker" wrote:

Hi Again Kelli : )

Important distinction to make:

Startup/Shutdown scripts are for functions that pertain to computers, not
users. They run in system context. A startup script cannot for example
map
a drive for a user because the user is not yet logged in. It could
install
a program that has an unattended install mode, or change machine registry
settings - etc.

Logon/Logoff scripts operate on users, and have access to the current
user's
registry settings and such for mapping drives, printers etc.

You appear to be trying to apply the script to certain users - so the
question is, what is your script doing?
If it is setting _user_ application preferences or something it should
be a
Login script under user settings in the policy.

Otherwise, as Florian mentioned, you need to give Authenticated Users
read
and apply permissions in the GPO, so the computer(s) can process the
script.

Hope that helps.
Dave

"Kelli" <Kelli@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A53C76B1-6F63-4A64-8E62-4B4B51DEB9CC@xxxxxxxxxxxxxxxx
I have a bat file that I would like to run at startup on specific
computers
(will become a group once I get the kinks worked out).

I have tested the bat file and it works outside of group policy but I
can
not get it to work within group policy. It is located in computer
configuration\windows settings\scripts\startup. It calles the file
\\server\share\location\NitroDefaults.bat

Are there parameters that I need to add? When I click on show files,
it
looks but the folder it finds is empty.

The security settings are as follows

Authenticated Users - None
CREATOR OWNER - None
Domain Admins - Read, Write, Create All Child Objects, Delete All Child
Objects
Enterprise Admins - Read, Write, Create All Child Objects, Delete All
Child
Objects
USER1$ - Read, Apply
USER2$ - Read, Apply
USER3$ - Read, Apply
SYSTEM - Read, Write, Create All Child Objects, Delete All Child
Objects

If I look at User 1,2 or 3's gpresult, this policy is called out and is
recognized. If I run gpupdate /force, it gives me the statement
"Certain
Computer policies are enabled that can only run during startup. OK to
Reboot?" So I know that it sees the GP.

This policy has not changed since yesterday afternoon, giving it plenty
of
time to replicate thru the domain.

I am at a lost for what to do next. I plan on expanding upon this idea
for
other things that need to be done at startup such as mapping printers
and
network drives. So any help at all would be greatly appreciated!!

Kelli






.

Relevant Pages

  • Re: Finding users in local admin groups
    ... > Here is a vbscript that you can run against a remote computer that moves ... > *local* users except 'Administrator) from the Administrators group to the ... You should also add to the script logging to a file of the ... > you moved on what computers. ...
    (microsoft.public.win2000.security)
  • Re: To force the local admin password
    ... I have very strange issue with a policy. ... I would like to force the local admin password on the computers. ... So I created a policy with a script to apply when the ... The local administrator password is not changed on all computers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Change local administrator password ? through GPO or push script ?
    ... I would like to change the local administrator password of every computers member of my AD domain but I am not sure of the best method. ... Create a vbs script that points to the local computer and then deploy this script by GPO. ... This attribute will permit to know wich admin password is configured for this machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Not so Newbie
    ... The script is designed for situations like yours. ... wit 35+ computers and to go to each of those computers to individualy ... Prompt for an executable to run on each remote computer in the group. ... so you know where the deployment failed. ...
    (microsoft.public.windows.server.scripting)
  • Scripted IPSec policies on Windows XP (without AD/GPOs)
    ... I’ve been experimenting with making an “IP Security Policy” on a local ... multiple computers – i.e. be able to script it in some way. ... have access to deploying various types of script jobs to the Windows XP ... Does anyone know of a way to script applying this IPSec policy onto ...
    (Focus-Microsoft)