Re: Disabling a GPO logon Script

Yes, that can be done, but how you have to do it depends on how
exactly you have defined your current logon script, in which GPO,
and to which OU the GPO is linked.

I'm going to assume that your current logon script is defined in
the "User configuration" part of a GPO which is linked to the
"Users" OU, thus affecting all users, irrespective of the computer
they logon to.

The easiest way to prevent this script from running when users
logon to the Terminal Server is to create a second GPO and link it
to the OU which contains the Terminal Servers (but *no* user
accounts).
In this TS-GPO, you have to define minimally these 2 settings:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - Enabled

User Configuration - Windows Settings - Scripts
Logon - Disabled

What loopback processing does is that it takes the User
Configurations from the GPO linked to the computer (in this case
the Terminal Server), in stead of the normal processing (taking the
user settings from the GPO linked to the user account).

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?QWxleCBBbmRlcnNvbg==?=
<AlexAnderson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 25 jul 2007 in
microsoft.public.windows.terminal_services:

Hello Everyone,

We have a GPO logon script that users get when they log into
their computer or TS. Our goal is disable the logon script when
users log into the TS server. I found the KB article
(http://support.microsoft.com/kb/924034/en-us) that explains the
process however the script still runs when a user logs in. I'm
not sure if it's because the script is tagged to a GPO or if the
KB article is meant for entirely something else? I did get help
from the VB script people on how to exclude certain computers
from running however I thought it would be much easier to just
disable the logon script feature on the TS server. Any help
would be much appreciated.

Thank you
Alex Anderson
.

Relevant Pages

  • Re: Loopback policy enabled, seems to cause login script to run tw
    ... you can still use loopback processing mode but move the logon scripts from ... GPO containing it applies to, regardless of which actual GPO it is included ... enables loopback processing appears and where the relevant computer accounts ... Sounds like you have included the setting that runs the Logon Script so high ...
    (microsoft.public.windows.group_policy)
  • Re: Disabling a GPO logon Script
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... you can easily jump out of the script by ... But a GPO would be nicer. ... disable it by not specifying a logon script? ...
    (microsoft.public.windows.terminal_services)
  • Re: Loopback policy enabled, seems to cause login script to run twice
    ... GPO containing it applies to, regardless of which actual GPO it is included ... the description of how Loopback processing works is NOT ... enables loopback processing appears and where the relevant computer accounts ... Sounds like you have included the setting that runs the Logon Script so high ...
    (microsoft.public.windows.group_policy)
  • Re: dont run logon script?
    ... Put your TS in a separate OU, create a TS GPO, link it to this OU. ... Configure this GPO with loopback processing, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > I don't want to run the logon script which assigned from ...
    (microsoft.public.win2000.termserv.clients)
  • Re: Disabling a GPO logon Script
    ... you can easily jump out of the script by ... MCSE, CCEA, Microsoft MVP - Terminal Server ... disable it by not specifying a logon script? ... GPO, and to which OU the GPO is linked. ...
    (microsoft.public.windows.terminal_services)
Loading