Re: Login Script user exclusions


Some random thoughts:

- Where are the users defined that need to be excluded, or how do you plan to
manage the list of users? (security group, OU, text file list, , specific
software exists on the machine, account naming convention, etc.)

- Make sure the login script is defined to run via the GPO, and not in each user
account individually.

- If this GPO only assigns the login script, you can use permissions on the GPO
to deny them access. If the GPO does other things then that won't work. You
could remove the login script from that GPO and create on specifically for it.

- From within adlogin.bat, you could check for group or OU membership and exit
early.

Provide more details.


"Jsioui" <Jsioui@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1E9E03C9-D451-4AD2-A61F-E80432ED6609@xxxxxxxxxxxxxxxx
Is there any way I can exclude users from running the adlogin.bat? Due to
lack of software distribution tools we have to install MS patches via login
script but need to exclude a number of users due to FDA restrictions. Win
Server 2003 with AD and GP. Workstations are W2K, NT and XP.

Thanks
--
Jsioui


.

Relevant Pages

  • Re: Block GPO on IP address
    ... a vanilla suggestion that you create a Site GPO for the software deployment. ... Server and use Security Group Filtering (whereby you remove the ... Authenticated Users from the Security Tab and create a Security Group and ... Let's look at the Zuerich, ...
    (microsoft.public.win2000.group_policy)
  • Re: Internet restriction
    ... And the security group that you would use in the Group Filtering would be ... Because we want the members of this ... Authenticated Users group from the Security Tab on the GPO and replace it ... >> OU that contains all of your user account objects. ...
    (microsoft.public.win2000.group_policy)
  • Re: GPMC Group Policy Modeling - installed software
    ... (ie. WindowsMessenger is setup there in a GPO) ... application by membership of this security group. ... and then do the RSoP. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Groups in OU
    ... > Can a security group be in an OU and have a GPO linked to it? ... GPOs are applied to user and/or computer objects within ... security group filtering to control application of the GPO. ...
    (microsoft.public.windows.group_policy)
  • Re: Security Groups in OUs
    ... APPLY GROUP POLICY rights to the GPO. ... Let's say that you have an OU in which there are 55 user account objects. ... If one does not already exist, create a security group that includes ... if you did not want to create a group with 51 members - creating one ...
    (microsoft.public.win2000.group_policy)