Re: login script that moves a user account to an existsting OU

Tech-Archive recommends: Fix windows errors by optimizing your registry


"paok" <paok@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AAA4A814-4EDD-492E-99B8-1E4297B91AA4@xxxxxxxxxxxxxxxx
>I didn't understand that a domain user logon script requires necessary
>rights.
> But what about group policy logon scripts ?

Logon scripts run only when someone logs on, and they always run with that
user's security rights. It doesn't matter if the script is defined in the
user account or in group policy.

Group policy also lets you define computer startup scripts, which run with
the computer account's security rights (SYSTEM) but these only run when the
computer boots up.

It seems strange to me that you want this to run as someone logs on. Why
not run this periodically (as a scheduled task) every day or every X hours,
and have it scan all user accounts in the LDAP source and move all users
accordingly in AD?



.

Relevant Pages

  • Re: Time issue
    ... Hi Dan, ... Does not require logon scripts or admin rights, ... > but that won't work since basic users don't have the ... > My W2K PC's are ok since users have rights via my AD ...
    (microsoft.public.win2000.security)
  • GPO Assigned Logon Scripts
    ... rights on their workstations, i'm trying to migrate away from this, but i've ... encountered problems as their logon scripts write files to the Windows ... I'd like to change to logon scripts (batch files) to VBS but my question is, ...
    (microsoft.public.windows.server.active_directory)
  • Logon Script
    ... A couple of weeks ago I posted a question about logon scripts and was ... I've been using login script #6. ... ' Bind to the computer object in Active Directory with the LDAP ... However, if they do have rights to the printer, ...
    (microsoft.public.windows.server.scripting)
  • another login script question
    ... A couple of weeks ago I posted a question about logon scripts and was ... I've been using login script #6. ... ' Bind to the computer object in Active Directory with the LDAP ... However, if they do have rights to the printer, ...
    (microsoft.public.windows.server.active_directory)
  • RE: 2003 User Templates.. Do they really work? Custom profiles nee
    ... redirection and logon scripts. ... Folder Redirection: ... For more Group Policy troubleshooting info, ... and selecting the new template that I created using the ...
    (microsoft.public.windows.server.sbs)