Re: DST Updates Deployed via Group Policy

Thanks for the reply. Yes, your description is accurate, however a previous
response to my post (from Florian) states that a GPO cannot be linked to a
Security Group. I thought that it could, but now that its not working, I can
see that this must be true (I need to brush up on ADS skills). However, I
WAS able to select the group in the GPO editor so I assumed that it could
work without creating an OU and moving computer accounts there.

I am using one machine to test the script at the moment and rebooting it did
not apply the update, however I have not tested the script locally on the
machine from the Netlogon share because this is the only machine I can test
without disrupting users at the moment.

No troubleshooting steps except for checking for log entries, however I am
going to run the policy from an OU as opposed to the group and test it.
--
Thanks, Jeff


"Roger Abell [MVP]" wrote:

So, you are having a startup or shutdown script run, as defined
in a GPO that you have filtered by use of a security group that
you defined having the machine accounts of W2k machines as
members. This security filtered GPO you have then linked to
the domain, or otherwise sufficiently high that all W2k machine
objects are within its scope of application.
Is this correct?
Have the W2k machines rebooted (needed to see the new group
membership as well as to cause the script to run)?
If you place something simple in the script, like
echo this junk > c:\text.txt
can you verify that the script is running?
If you log into one of the machines as an admin can you
manually run the script sourced from the network location ?
What other troubleshooting step/info have your taken/gathered?

Roger

"Jeff" <Jeff@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C458D398-DD94-4391-B4E2-6CCF8114AC2B@xxxxxxxxxxxxxxxx
Hello everyone,

Although our shop is mostly XP Pro, sp2 and 2003 servers, we have some
Windows 2000 Pro machines and 2 Windows 2000 Servers that require this
update. I've followed instructions in the following KB article:

http://support.microsoft.com/kb/914387/en-us

and all the scripts are setup and replicated, yet none of my windows 2000
machines are getting the update. I have setup a specific group for
Windows
2000 machines and created the GPO object to run that script. We are using
Windows 2003 servers running ADS.

Any ideas?


--
Thanks, Jeff



.

Relevant Pages

  • Re: DST Updates Deployed via Group Policy
    ... if they are just reg settings and nothing more then ... WAS able to select the group in the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... Aren't these "patches" for XP and 2003 just the same registry ... WAS able to select thegroupin the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • RE: login Scripts not running
    ... The scripts were set in "Computer Cnfiguration" of GPO, ... To ensure the "Startup Script" can run normally through GPO, ... first try to run it locally on the client side to check if it works. ... is key point of that Windows 2000 clients cannot apply the startup script ...
    (microsoft.public.win2000.active_directory)
  • RE: Disabling USB mass storage
    ... > registry on each to disable usb drive creation. ... As part of your script, have it report back on the status. ... customer machines, but everything we do has to be deployable on a very large ... > We tried restricting usbstor.sys through the GPO, ...
    (Focus-Microsoft)
  • Re: RE: How to chnage registry by a GPO
    ... For Windows 2003 Server, in a GPO, ... Manage Your Server page at logon. ... >>>> I currently run a script to create/modify a registry ...
    (microsoft.public.win2000.group_policy)
Loading