Exclude users and computers form logout script

From: daugavpils@xxxxxxxxx
Date: 27 Apr 2006 04:23:12 -0700

Hi,

I have some time on this problem and it seems that there must be some
simple solution for it, so maybe someone already have solved it?
We have Windows 2003 domain with relatively simple OU structure,
where each department's users and computers are placed in OUs, e'g'
Sales OU has SalesUsers OU and Sales Computers OU, Research OU has
Research Users and Research Computers OU and so on.Also we have Test OU

and Domain Controllers OU.
There is also All Users GPO linked to domain that defines logout
script in Users section.We needed to exclude certain users and
computers from running this logout script and was quite straightforward

with users - just put them in Nonlogoutscript Grouip and set Deny
access for this group in GPO Security ACL.
However it does not restrict other users from running logout scripts
on Test Machines and Domain Controllers because Logout scripts are
defined in Users section of GPO .
I have tried using Loopback , but it did not make any difference.
If somebody would give me what direction should I turn, I would realy
appreciate it.

Thank you in advance!

.

Prev by Date: Re: Number of GC servers
Next by Date: Re: Active Directiry in LongHorn
Previous by thread: Prevent adding to a group
Next by thread: Re: Exclude users and computers form logout script
Index(es):
- Date
- Thread

Relevant Pages

Exclude some users and computers form logout script
... Sales OU has SalesUsers OU and Sales Computers OU, ... There is also All Users GPO linked to domain that defines logout ... However it does not restrict other users from running logout scripts ... on Test Machines and Domain Controllers because Logout scripts are ...
(microsoft.public.win2000.group_policy)
Re: GPO ISSUE
... Computers and that is broken up between Laptops and Workstations. ... The 2 groups are Desktopstandard Computers and Desktopsearch ... I have the GPO's link to both the Domain Controllers OU and Computers OU (I ... For Security filtering I removed Auth Users and for Desktopstandard GPO I ...
(microsoft.public.windows.server.active_directory)
Re: GPO ISSUE
... The 2 groups are Desktopstandard Computers and Desktopsearch ... I have the GPO's link to both the Domain Controllers OU and Computers OU (I ... For Security filtering I removed Auth Users and for Desktopstandard GPO I ...
(microsoft.public.windows.server.active_directory)
Re: GPO ISSUE
... Computers and that is broken up between Laptops and Workstations. ... The 2 groups are Desktopstandard Computers and Desktopsearch ... > I have the GPO's link to both the Domain Controllers OU and Computers> OU (I ... > For Security filtering I removed Auth Users and for Desktopstandard GPO> I ...
(microsoft.public.windows.server.active_directory)
Re: Need help with sites configuration
... MCSE, MVP Directory Services ... All domain controllers have a copy of my DNS zone. ... All my clients have statically configured DNS servers 1 and 2 both on ... Production computers have a GPO, setting their DNS servers to 3 and 4 ...
(microsoft.public.windows.server.active_directory)