Re: Access XP Workstations via RWW

One trick I've used is creating a marker file as the last step of the logon script if it is successful. And then checking for it on startup of the script -

if exist markerfile.txt goto End


--
Charlie.
http://msmvps.com/blogs/xperts64
http://mvp.support.microsoft.com/profile/charlie.russel


"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message news:%23oCTdR$vIHA.4492@xxxxxxxxxxxxxxxxxxxxxxx
Thinking out loud here...

Since all your users are a member of the "Remote Web Workplace Users" security group, you might be able to create startup script that adds the domain "Remote Web Workplace Users" group to the local "Remote Desktop Users" group on each PC. That should allow each user to remote access any PC on the network via RWW.

net "Remote Desktop Users" "<yourdomainname>\Remote Web Workplace Users" /add

The startup script would then be added to a new Group Policy and linked to the (default) SBSComputers OU.

Adding Startup Scripts to GPOs
http://windowsitpro.com/article/articleid/27330/adding-startup-scripts-to-gpos.html

While this example appears to be for Windows 2000, I suspect you can use the Group Policy Management module in SBS 2003 Server Management to accomplish the same thing.

After all the workstations have been rebooted and the new group policy applied, it could then be disabled on the SBS server. (Of course, the workstations can all be rebooted remotely).

I'm not sure if the following limitation applies to Windows 2003:

NET.EXE /ADD command does not support names longer than 20 characters
http://support.microsoft.com/kb/324639

If it does apply to Windows 2003....

CUSRMGR
http://www.dynawell.com/support/Reskit/win2k.asp

Another fly in the ointment here may be whether Vista machines can be easily set up using this startup script.

--
Merv Porter [SBS-MVP]
============================



"SharQ" <SharQ@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:37638BF6-8C05-4454-84E7-C7F3329FEDA7@xxxxxxxxxxxxxxxx
I hear you. Thanks for the information.

"warren@xxxxxxxxxxxxxxxxxxxx" wrote:

Well, regardless of that, the second paragraph of my response to you will
get your users connected to the workstations, and you can do it without
going to a single workstation, except to maybe turn it on if it is off at
the time you do it.

In my experience, Administrative privileges on the local machine is an
absolutely necessary thing until programmers learn how to write their
programs to not require the user to have administrative rights. I wish you
the best with that, as I once felt the same way.

Regards,
Warren




.

Relevant Pages

  • Re: Xcopy not working in startup script
    ... This is a basic batch file script that I am ... deploying through group policy in the startup script to copy ... it works fine on it's own, but when deployed through group policy it ... the permissions of the computer object elsewhere in the domain. ...
    (microsoft.public.windows.server.general)
  • Re: Restricted group
    ... Startup script would work well. ... user will be added to the administrators group for the domain. ... > This cannot be done with existing Group Policy extensions. ...
    (microsoft.public.win2000.group_policy)
  • Re: connecting to printers at PC startup
    ... I want to use a group policy to have PCs automatically connecting to specified printerwhen the PCs start up. ... The startup script gets executed - I am sure of this because if I make any mistakes in the script a warning message will pop up. ... You can't do it in a startup script as you have found out - the reason for that is that connecting to a shared printer is done on a 'per user' basis (try it: log in as a user, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Run script with elevated privileges
    ... add it as a startup script. ... The script reads the serial number from the system BIOS ... problem is rights, so I'm wondering if there is a way to make a script ... as opposed to one imposed through group policy. ...
    (microsoft.public.scripting.wsh)
  • Re: Logon Scripts Acrossed VPN
    ... What does GPMC GPREsults show under the Group Policy Infrastructure Component Status for one of those machines? ... I think this error is related to computer processing rather than your logon script issue but still probably worth figuring out if there is a problem. ... Darren Mar-Elia ... > This same error seems to be on every system in my remote offices. ...
    (microsoft.public.windows.group_policy)
Loading