Re: Terminal Server Login Specific Script

Tech-Archive recommends: Fix windows errors by optimizing your registry

comments inline.

"Will Niccolls" <leatherwon@xxxxxxxxx> wrote on 16 nov 2006 in
microsoft.public.windows.terminal_services:

Can someone verify check my list here to see if I'm
understanding correctly how to get a GPO configured for a
specific login script to run only for the TS?

1. Place TS in a separate TS OU.

2. Create and link a GPO to the TS OU that enables loopback
processing. The same GPO will also specify the Login script in
the User Settings section. Do I choose the Merge or Replace
option in the Loopback setting?

I find that "Replace" is the best option, because "Merge" is much
more difficult to maintain from an administrative point of view.
With Mergem it's easy to forget that there can be other settings in
other GPOs as well (possibly even managed by other Administrators).

3. Computer accounts are in a 2nd, separate Workstations OU.

4. User accounts are in a 3rd, separate Users OU. User account
properties still specify a login script--I assume this setting
will be overridden by the GPO that is linked to the TS OU in
step 1. Correct?

You mean the account properties in AD - no, this login script will
always run. So in this scenario, your users will run both logon
scripts.
You can solve this in a number of ways: either put a line at the
start of your AD-defined logon script where you check if the script
runs on a TS, and then exit the script, or assign *all* logon
scripts through GPOs, not in the AD account properties at all.

5. Will other GPO's linked to the User OU still be effective
when they log in to TS? For example, user adminstrative
template settings for Outlook? Internet Explorer maintenance?
Etc.

Not if you use the Replace option. With the Merge option -only
those settings which are not overriden in the TS GPO.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
.

Relevant Pages

  • Re: Applying Computer Settings Slow
    ... try to not apply the script or any other gpo with different settings, I don't believe in some kind of magic, so you probably are running some tool gpo or script that is affecting the user's logon. ... >>> default domain policy does not have any configuration changes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Install Windows Patch via GPO
    ... I did gpresult on the PCs and the GPO is showing up now. ... Browse when you want to add a new script or put the ... only reply to Newsgroups ... Ethernet adapter Local Area Connection 1: ...
    (microsoft.public.windows.group_policy)
  • Re: GPOs not applying
    ... > settings for both user and computer configuration. ... >> I have a two deep OU structure with one GPO per OU. ... >> Folder redirection, which is crucial as my start menus, ... >> are mapped despite there being a script which does this. ...
    (microsoft.public.win2000.group_policy)
  • Re: Setting scripts for workstations only
    ... Where are the settings for loopback processing. ... your script and change it to a login script, ... use loopback GPO. ...
    (microsoft.public.windows.group_policy)
  • Re: would a GPO have been better?
    ... shortcut to everyone, and you only have to update it in one spot, and ... > file to all machines on the network with varying levels of success. ... > 2) The main operation I'm looking for the gpo to perform is just a file ... The login script is a WSH ...
    (microsoft.public.win2000.group_policy)