Re: NETLOGON Share

The best place to put it is in the sysvol within the policy that is calling
the login script itself. When a user logs on, they have no drives mapped
yet so they have access to local resources or the sysvol.

http://support.microsoft.com/kb/322241/EN-US/

If you are having trouble with admins modifying scripts then they need to be
demoted. How many admins do you need to modify a script? If a user is a
domain admin, you can try and take something away but they can just go back
and give it back to themselves.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

"Josh Messerschmitt" <joshua.messerschmitt@xxxxxxx> wrote in message
news:epNn7T5FGHA.916@xxxxxxxxxxxxxxxxxxxxxxx
> The way I understand it, the NETLOGON (scripts) share is where to put
> things that will always be available. If a domain has 20 sites/ou's under
> it and each site has a network admin, is it best practice to for each site
> to put their login scripts in this share on a domain controller to be
> replicated? If so, and each admin has full control to this share - there's
> not much stopping the admins from deleting/modifying each other's work -
> unless they turn off inherit permissions on each script, etc. If this is
> preferred practice, what is the best way to give the groups these admins
> are in rights to control the files on this share? Manually on one DC and
> let it replicate? Through ADUC? I did see the SYSVOL share metnioned in
> there.
>
> Any help is appreciated
> --
> Josh Messerschmitt
>


.

Relevant Pages

  • Re: need to modify local group membership via VBscript
    ... The script I posted was orginally used to add another domain group ... It only worked if Domain Admins was ... can add domain groups to the local Administrators group. ... how to add a domain group to local administrators account: ...
    (microsoft.public.windows.server.scripting)
  • Re: need to modify local group membership via VBscript
    ... A logon script runs with the credentials of the user, ... ' Bind to local Administrators group on remote computer. ... Wscript.Echo "Domain Admins already in Administrators on " & strComputer ...
    (microsoft.public.windows.server.scripting)
  • Re: need to modify local group membership via VBscript
    ... It only worked if Domain Admins ... script can add domain groups to the local Administrators group. ... version intended to run as a Startup script, configured in Group Policy: ...
    (microsoft.public.windows.server.scripting)
  • Re: NETLOGON Share
    ... When a user logs on, ... How many admins do you need to modify a script? ... they shouldn't be able to modify each others policies, scripts, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Weird script issues
    ... I also have the script as a logon script, so each time a user logs in it will ... I even get the error when a user logs in, so .UserName should not be ... It would fail at the line aUserName = Split ...
    (microsoft.public.scripting.vbscript)