Re: Startup Bat File
- From: "Dave Stoecker" <david_stoecker@xxxxxxxxxxxxxxxxx>
- Date: Tue, 25 Apr 2006 15:59:04 -0500
Hi Kelli,
Inline again,
"Kelli" <Kelli@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E3015E79-56B6-4D32-97D2-3758AB913A4C@xxxxxxxxxxxxxxxx
So ... Should i have a group with computers or users.. I'm thinking I need
to
change it to users. It's currently using a universal security group of
computers but I have not seen it run and it isn't giving errors anymore in
the application log.
Wow - I totally overlooked that rather obvious and important detail.
Yes, filtering to a group of users is probably simplest.
Link the policy at/above where their accounts reside in the AD tree.
So changing it to the user, it won't matter what computer they log into,
it
should run the bat file associated with their domain account correct? I
am
going to remove the computer group and just add people individually to the
security of the policy until I get it working correctly. (Namely my own
domain account)
Yes, any computer they log into.
As an aside, I would suggest making the group now, call it whatever
describes it's purpose adequately.
Even if you will be the only acount in it for the time being.
It is a commonly recommended practice to avoid assigning permissions and
rights to individual domain accounts.
Much harder to manage/troubleshoot later otherwise, as I learned the hard
way some time ago.
Hope I'm not confusing things more than helping.
Dave
Kelli
"Dave Stoecker" wrote:
Inline...
"Kelli" <Kelli@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:91E591B6-3D67-4609-B26F-E612F93E43A4@xxxxxxxxxxxxxxxx
Here is what my script is doing ...
@Echo off
REM Copy General.ini file into users directory, this fixes the print as
image and adding custom paper sizes
Copy "\\dpprojects\setup\IT
Documents\GroupPolicySource\Nitro\general.ini"
"C:\Documents and Settings\%username%\Application Data\Zeon\DocuCom\PDF
Driver" /Y
REM Copy pluscore.ini file into users directory, this fixes
rotate/center
and removes the organization box on startup
Copy "\\dpprojects\setup\IT
Documents\GroupPolicySource\Nitro\pluscore.ini"
"C:\Documents and Settings\%username%\Application Data\Zeon\DocuCom\PDF
Plus"
/Y
So it looks like it needs to be moved to the logon script within the
user
configuration instead. I will give that a try and let you know.
Yes, that way your %username% variable will grab the name of the user who
is
logging in.
Does my copy line look right, and I want the REM line to be a 'comment'
line
but it doesn't seem to be working. I wrote the bat file in notepad.
Those look fine, assuming each is on one line (my newsreader is wrapping
them) and the destination path already exists.
Is it that you are seeing the command window when a user logs in, or are
you
getting an error?
Kelli
"Dave Stoecker" wrote:
Hi Again Kelli : )
Important distinction to make:
Startup/Shutdown scripts are for functions that pertain to computers,
not
users. They run in system context. A startup script cannot for
example
map
a drive for a user because the user is not yet logged in. It could
install
a program that has an unattended install mode, or change machine
registry
settings - etc.
Logon/Logoff scripts operate on users, and have access to the current
user's
registry settings and such for mapping drives, printers etc.
You appear to be trying to apply the script to certain users - so the
question is, what is your script doing?
If it is setting _user_ application preferences or something it
should
be a
Login script under user settings in the policy.
Otherwise, as Florian mentioned, you need to give Authenticated Users
read
and apply permissions in the GPO, so the computer(s) can process the
script.
Hope that helps.
Dave
"Kelli" <Kelli@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A53C76B1-6F63-4A64-8E62-4B4B51DEB9CC@xxxxxxxxxxxxxxxx
I have a bat file that I would like to run at startup on specific
computers
(will become a group once I get the kinks worked out).
I have tested the bat file and it works outside of group policy but
I
can
not get it to work within group policy. It is located in computer
configuration\windows settings\scripts\startup. It calles the file
\\server\share\location\NitroDefaults.bat
Are there parameters that I need to add? When I click on show
files,
it
looks but the folder it finds is empty.
The security settings are as follows
Authenticated Users - None
CREATOR OWNER - None
Domain Admins - Read, Write, Create All Child Objects, Delete All
Child
Objects
Enterprise Admins - Read, Write, Create All Child Objects, Delete
All
Child
Objects
USER1$ - Read, Apply
USER2$ - Read, Apply
USER3$ - Read, Apply
SYSTEM - Read, Write, Create All Child Objects, Delete All Child
Objects
If I look at User 1,2 or 3's gpresult, this policy is called out and
is
recognized. If I run gpupdate /force, it gives me the statement
"Certain
Computer policies are enabled that can only run during startup. OK
to
Reboot?" So I know that it sees the GP.
This policy has not changed since yesterday afternoon, giving it
plenty
of
time to replicate thru the domain.
I am at a lost for what to do next. I plan on expanding upon this
idea
for
other things that need to be done at startup such as mapping
printers
and
network drives. So any help at all would be greatly appreciated!!
Kelli
.
- References:
- Re: Startup Bat File
- From: Dave Stoecker
- Re: Startup Bat File
- From: Kelli
- Re: Startup Bat File
- From: Dave Stoecker
- Re: Startup Bat File
- From: Kelli
- Re: Startup Bat File
- Prev by Date: Re: Share perms problems with folder redirection
- Next by Date: Re: Setting up Group Policy in a Workgroup without affecting all t
- Previous by thread: Re: Startup Bat File
- Next by thread: Re: Disable command.com via GP
- Index(es):
Relevant Pages
|
