Re: GPO Login Scripts

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi!

GPO settings apply only to user and computer accounts in OUs. GPO settings
cannot be applied to groups. Security filtering is advanced feature which
allows (or denies) applying of GPO settings based on group membership.

You should put all "clinical" user accounts in same OU and link GPO to it.
If this is not an option, you can create new OUs under the OUs in which
these user accounts reside and link GPO to new OUs. This should work and
useres will keep old GPO settings as well.

Toni

"Brian" <Brian@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B23D3B47-DA66-4007-AF24-BAF784A4C23E@xxxxxxxxxxxxxxxx
Hello,

I am trying to accomplish the following task and cannot seem to get this
to
work they way I want it to.

I am running Windows Server 2003 Stnd and created a OU in AD called
Clinical
Users. Within that OU I created a Global Security Group called Clinical
Users Group and assigned users into that group. Now I need to create a
User
GPO to run a script to map a drive to another server when ever the users
in
the security group login. I added the settings under User Config/Windows
Settings/Logon/Logoff and then pointed to the unc path of where the batch
file resides. Under the gpmc console I added the 'Clinical Users Group'
to
the security filters for the new GPO that I created for the Clinical Users
OU.

When one of the users the is part of the Clinical Users Group logins, the
drive does not get mapped. If I move the user object to that OU, it works
fine. The problem is that each user resides under a seperate OU already
and
needs to reside there...this is broken out by department. I cannot apply
the
GPO to the other OU's to map the drive because only certain users in each
department need this resource.

Question basically is, can you apply a GPO to run a script to a security
group...if so; how?

Thanks,
Brian


.

Relevant Pages

  • Re: Windoze GPO Question
    ... Some GPO settings remain persistent even ... And logging in with a local account is a bad idea; ... This may be slightly off topic, but I have a question about GPO scope. ... I have a client that has a bunch of sales people who have laptops. ...
    (Security-Basics)
  • Re: laptops connect at work but not at home?
    ... FYI, sometimes with GPO settings, you need to "disable" a setting to undo it ... Computer Configuration section for a specific user account. ...
    (microsoft.public.win2000.dns)
  • [NT] RunAs Allows Bypassing User GPO in Windows XP/2003
    ... Get your security news from a reliable source. ... RunAs Allows Bypassing User GPO in Windows XP/2003 ... bypass user GPO settings completely. ... Microsoft was contacted by the author, ...
    (Securiteam)
  • Re: Apply User Settings only when using specific Computers
    ... In the GPO Settings on the Scope tab ... a logon script under User Configuration. ...
    (microsoft.public.windows.group_policy)
  • Registry failed due to error listed below.. unspecified error (vis
    ... I have a GPO which i have set for only Vista machines in 2003 GPO.. ... I do have a custom registry key which enables the link state setting in the ... i have older gpo settings which i have recently changed ... The processing of Group Policy failed because of an internal system error. ...
    (microsoft.public.windows.group_policy)