Re: Group logon script

"cj" <cj@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3418AA9B-C838-482D-B9BE-0601B8FB008F@xxxxxxxxxxxxxxxx
Thanks Brian.

"Brian Desmond [MVP]" wrote:

You can assign multiple login scripts via group policy, but not via group
membership directly.


Desmond is absolutely correct -- many people incorrectly
believe that GPOs can be linked to a group or to the OU
where a group resides but this has NO effect (at least not
based on the group.)

Another approach is to link the GPO-batch to "too much"
(i.e., at a higher level) and then write the script so that it
skips over (part of) the contents based on testing the
group membership from the script itself.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"cj" <cj@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:647204C9-9AC4-42EE-901C-D8F219E9B6DE@xxxxxxxxxxxxxxxx
Our users currently run a logon script based on the OU that they are
in.
A
new OU was recently setup for a new dept that is made up of current
users
from several other OUs. They were placed in a group under the new OU.
This
group will need access to not only their current department's normal
login
information but also need to attach to additional network printers and
drives
based on the second OU.
Can a user get two scripts on logon, one based on the their user OU and
another based on a group membership? Would it be hard to do? It seems
like
there must be others doing this. How is it handled?





.

Relevant Pages

  • Re: AD group logon script question
    ... like I described our logon script: ... If individuals need special access to certain resources, ... and each group must be protected from the administrators of the other. ... membership as required. ...
    (microsoft.public.scripting.vbscript)
  • Re: HELP..Need help with script that auto adds group to local admin group.
    ... client OS is Win9x, then a loop is required to retrieve this. ... you can change membership in all local ... Best is often to use a Startup script to make a global group a member of the ... local administrators group on every machine. ...
    (microsoft.public.scripting.vbscript)
  • Re: Local computer - privileged access - active directory question
    ... I've looke at Richard's site and found a vbs script that comes ... The program EnumLocalGroup.vbs enumerates the membership of a local group. ... The program can be easily modified to enumerate the membership of a local ... NetBIOS names and enumerate the membership of a local group on each ...
    (microsoft.public.windows.server.scripting)
  • Re: Need script to list various groups and there users
    ... Would it be very easy to add the user membership lookup to this script? ... To restrict this to groups that have the string "admin" in the name, ... This explains how to specify the attribute values to retrieve in the comma ...
    (microsoft.public.windows.server.active_directory)
  • Re: How do I get a users group belonging from my AD
    ... I retrive this info from AD to my script? ... I have several example VBScript functions to check group membership linked ... returns the Distinguished Name of the parent container, ...
    (microsoft.public.scripting.wsh)