Re: How to launch program only for certain group>

If you start your program with 'start /w myprogram' it will not end the batch file until the program exits.
Usefulness depends on your app, but it might help.

Also, here is another alternative to setting user vs. admin local policies: http://support.microsoft.com/kb/325351

--
Guy Yardeni



"C17" <c17@xxxxxxxxxxxxxxxx> wrote in message news:Sprvh.26$wT1.0@xxxxxxxxxxxxxxx
Thanks for the responses everyone!

(1) This particular TS server is not within an AD domain, so GPMC doesn't apply unfortunately. Seems like a great tool.

(2) I tried putting IfMember into a batch file, as follows:

==================
@REM Launch MyProgram except if Administrator

@"c:\Program Files\Resource Kit\ifmember.exe" Administrators
@if errorlevel 1 GOTO DONE
@REM Notice that the syntax here is the opposite to normal in that %ERRORLEVEL% = 1 = Success.
@REM With most other commands %ERRORLEVEL% = 1 = Fail/Error
"c:\program files\MyProgram\MyProgram.exe"
:DONE

==================

I then designate this batch file run by using the Group Policy Editor on the TS Server:
User Configuration/Admin Templates/Windows Components/Terminal Services, policy "Start a program on connection". Problem is, for an Administrator, the
Problem is, TS will terminate the session right after the batch file runs -- which, in the case of the Administrator, terminates the session right away (instead of dumping the user to the desktop)! I guess I should have foreseen this; obvious in hindsight.

(3) I think I can now sharpen the issue. The TS group policy to "start a program on connection" has two very desirable behaviors (in my situation anyway)
a) It does not let the user get to the TS desktop and do random stuff
b) When the user exits the program, the TS session terminates automatically
BUT, it seems that (without GPMC), you can't customize these TS policies by group.
On the other hand, if I just use a standard logon script to launch my desired program for some users, I don't get (a) and (b) above.

I thank you for your suggestions so far, and I wonder if you have any more!

C17



"C17" <c17@xxxxxxxxxxxxxxxx> wrote in message news:1Zvuh.427$M9.118@xxxxxxxxxxxxxxx
Hi all,

Windows 2003 Server TS question. I would like to configure TS to launch a certain program automatically for all users in a certain group, but NOT if the administrator (or other non-group members) connect. I can't figure out how to accomplish this, can some kind soul point the way?

Thanks!

C17





.

Relevant Pages

  • Re: Locked out by local policy
    ... need to know administrator account name and password. ... to run gpedit.msc on another network machine to manage the group policy ... administrative share and configure that batch file to run as a startup ...
    (microsoft.public.win2000.security)
  • Re: Internet Explorer and index.dats
    ... I use a batch file that runs at boot. ... > So if my user account is reflected in the administrators account, ... >> the internal "Administrator" account. ... >> since if you delete the Temporary Internet Files via the Windows ...
    (microsoft.public.windowsxp.customize)
  • Re: please help.--3rd post. 2nd one lost in cyberspace--at least i cannot see it.
    ... i have downloaded and installed oracle. ... profile can run sql plus. ... if she boots and logs into her profile, she cannot run sql as the batch file ... > First, logged in as yourself or Administrator, go to Start-All ...
    (microsoft.public.windowsxp.general)
  • Re: disable net create command
    ... this creates a local acct. ... acct just unrrestricted through group policy. ... >> a user created a local admin account by writing a net ... >> create batch file in wordpad and ran it creating a local ...
    (microsoft.public.win2000.security)
  • Re: Group Policy in a NON Active Directory environment
    ... You could use a batch file or other script to roll out group policy ... I have a bunch of Win2K Pro machines... ... > prefer to just prevent them from changing the screen saver settings. ...
    (microsoft.public.win2000.security)