Re: Login Script



How do I install GPMC?


"Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eu7Wfd4eHHA.3960@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Rowland Costin schrieb:
Basically, I have a Win2K3 Terminal server in a small domain with 2
domain
controllers all under :active directory, no workstations. The LOGIN.BAT
file is stored in the folder
C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon

You are working with local policies, so all things you manipulate are
effecting all users.
Work with GroupPolicy in your AD, not with the local one.

- Install the GPMC
- create a OU, move the TS into it
- create an link a GPO to that OU
- Enable Loopback http://support.microsoft.com/kb/231287
- remove auth.Users from the GPO and add: your TS and your TS
sec.group/user

To use different loginscripts, you can use different GPOs, filtered
by Security Group, or use ifmember.exe inside your batch.

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english


.



Relevant Pages

  • Re: Login Script
    ... file is stored in the folder ... You are working with local policies, so all things you manipulate are ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: Login Script
    ... You are working with local policies, so all things you manipulate are ... Install the GPMC ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: Group police settings inventory
    ... Install GPMC with SP1. ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ... settings have been enabled in each GPO in my domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Copy GPO
    ... In server 2003 install GPMC and link the existing GPO to the OU, ... In server 2000 open the properties of the OU,Group policy tab, click ADD, under LOOK IN choose you domain and a list of all GPO's will be shown, here you can link the GPO also to the new OU. ...
    (microsoft.public.windows.group_policy)