Terminal Server Login Specific Script

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Will Niccolls" <leatherwon@xxxxxxxxx>
Date: Thu, 16 Nov 2006 11:56:12 -0500

Can someone verify check my list here to see if I'm understanding correctly
how to get a GPO configured for a specific login script to run only for the
TS?

1. Place TS in a separate TS OU.

2. Create and link a GPO to the TS OU that enables loopback processing.
The same GPO will also specify the Login script in the User Settings
section. Do I choose the Merge or Replace option in the Loopback setting?

3. Computer accounts are in a 2nd, separate Workstations OU.

4. User accounts are in a 3rd, separate Users OU. User account properties
still specify a login script--I assume this setting will be overridden by
the GPO that is linked to the TS OU in step 1. Correct?

5. Will other GPO's linked to the User OU still be effective when they log
in to TS? For example, user adminstrative template settings for Outlook?
Internet Explorer maintenance? Etc.

As always, thank you for your help,

Will

.

Follow-Ups:
- Re: Terminal Server Login Specific Script
  - From: Vera Noest [MVP]

Prev by Date: Re: Network Printers
Next by Date: Re: Using remote desktop and terminal services
Previous by thread: Mac client crashing (or disconn'ed) after printing to TS
Next by thread: Re: Terminal Server Login Specific Script
Index(es):
- Date
- Thread

Relevant Pages

Re: User Login
... The setting I'm referring to in item #1 is a Computer Configuration setting, so applying a GPO with this setting to an OU that only has User Accounts in it will have no affect whatsoever. ... The GPO must be applied to an OU that has Computer Accounts in it to be any use. ... If you want to, you can specify the user accounts in the GPO setting (Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignment Deny log on locally), but I suspect it will be easier in the long run to specify a group name here and put the e-mail only user accounts into that group. ... the domain group called Domain Users is a member of the local Users group on all computers; this is usually why any domain user can logon at any domin member computer. ...
(microsoft.public.windows.server.active_directory)
Re: Loopback policy enabled, seems to cause login script to run twice
... The scope of the Loopback processing setting is the computers to which the GPO containing it applies to, regardless of which actual GPO it is included in. ... the User Configuration settings from any GPO that applies to the computer are applied ... Sounds like you have included the setting that runs the Logon Script so high in the OU hierarchy that that GPO is in scope for both User accounts and Computer accounts. ...
(microsoft.public.windows.group_policy)
Re: User GPO not applying unless linked to computers
... > If I create a GPO containing only User settings and link it to the OU ... > containing the user accounts, the GPO does not take effect. ... It sounds like you are trying to deploy security setting to your ...
(microsoft.public.win2000.group_policy)
Re: GPO not picking up computer settings
... The user accounts are domain user accounts. ... I have removed the GPO that I ... Domain Policy and the Default Domain Controllers Policy. ... the Default Domain Policy so that the password settings are to not Disable ...
(microsoft.public.windows.server.security)
Re: Terminal Server Login Specific Script
... specific login script to run only for the TS? ... Create and link a GPO to the TS OU that enables loopback ... the User Settings section. ...
(microsoft.public.windows.terminal_services)