Re: Login Script

Hi,

Rowland Costin schrieb:
Basically, I have a Win2K3 Terminal server in a small domain with 2 domain
controllers all under :active directory, no workstations. The LOGIN.BAT
file is stored in the folder
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon

You are working with local policies, so all things you manipulate are
effecting all users.
Work with GroupPolicy in your AD, not with the local one.

- Install the GPMC
- create a OU, move the TS into it
- create an link a GPO to that OU
- Enable Loopback http://support.microsoft.com/kb/231287
- remove auth.Users from the GPO and add: your TS and your TS
sec.group/user

To use different loginscripts, you can use different GPOs, filtered
by Security Group, or use ifmember.exe inside your batch.

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english
.

Relevant Pages

  • Re: Folder Redirection/Offline Files for Users not in GPO
    ... Marcin, ... User GPO which I'm sure you are aware. ... I could have called the OU 'Sandbox' and the Security Group ... That would certainly not be a desired result of implementing Folder ...
    (microsoft.public.windows.server.active_directory)
  • Re: Login Script
    ... You are working with local policies, so all things you manipulate are ... Install the GPMC ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: Login Script
    ... How do I install GPMC? ... You are working with local policies, so all things you manipulate are ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: Block GPO on IP address
    ... a vanilla suggestion that you create a Site GPO for the software deployment. ... Server and use Security Group Filtering (whereby you remove the ... Authenticated Users from the Security Tab and create a Security Group and ... Let's look at the Zuerich, ...
    (microsoft.public.win2000.group_policy)
  • Re: Internet restriction
    ... And the security group that you would use in the Group Filtering would be ... Because we want the members of this ... Authenticated Users group from the Security Tab on the GPO and replace it ... >> OU that contains all of your user account objects. ...
    (microsoft.public.win2000.group_policy)