Windows Forum

Ask something
Discussion Locked

GROUP POLICY

0 helpful
12 replies

by legj1

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
First, please pardon my ignorance on Group Policy. I am an NT man. I have many OU's setup in AD Users and Computers. Basically have a hierarchial list of corporate departments. I wish to utilize LOGON and LOGOFF scripts for our HR dep't(example), but cannot seem to get the GP to work. I have setup the GP under the OU Properties. I have even gone as far as allowing APPLY GROUP POLICY to every usergroup permissions. However, my scripts never run. My domain OU has a DEFAULT DOMAIN POLICY, but I have disabled comp and user settings so my lower OU would apply the policy. Of course, this did not work either. Any advice for an NT boy? Thanks for the help. I am guessing that some policy setting is overriding my GP? Thanks for any and all help!

12 replies

by poo_music

Dear LEGJ1,

For Your Information, The script is running in the backgroup. This doesn's means that the scripts are not working. It is still running.

Have fun,
Cheers!!

by legj1

Thanks for the info, but I know they are not running because the script I am running is supposed to map a couple of drives. The logoff script will delete the drives.

by res06gwb

Have you checked the block policy inheritance in the group policy tab of the OU properties?

by legj1

Unfortunately, yes. I should have included this in the body of my original message. Sorry for that.

by ctpalmer

Group Policy only applies to Windows 2000 machines. If you want to utilize login scripts for downlevel clients (i.e. 9x) then you have to setup the login scripts the old (NT 4) way, through the user account. Sorry. Hope this helps.

by azizhakim

I have done a similar project but with installing software with both login in script & group policy.First in win2000 the scripts are in %systemroot%\sysvol\scripts.Place your login or logoff scripts in your scripts folder.when editing your gpo in ouin either user/machine & browse for scripts to implement.Please be alerted that it was not on a production server.

by azizhakim

Was not finished.to close you could implement
the same scripts through login & logoff properties on users properties although it is tedious,but it is a test to check if your script is running.In my case I ran a script just on my account.With the results I could implement through gp

by legj1

Somewhat helpful. I appreciate the help. Could you expand on how to run logoff scripts under USER properties? I only need to run my scripts on about 10 users...so it wouldn't be too tedious. However, I only see an option for logon scripts under USER properties. Any help would be appreciated. Thanks again!

by azizhakim

I have not done this,but the idea is the same.When I mentioned logoff scripts,that needs to get implemented through group policy.You have your 10 users in HR.You have
engineered the login & logoff scripts.You place them in the %systemroot%\sysvol\scripts
(The path is a little longer,but you want the scripts folder)On you OU group policy\windows setting\user setings\scripts, There on your login,logoff scripts point to the scripts individually for either case,filter out xcept you 10 user group,apply policy & you are done.from command prompt secedit /refreshpolicy user_polcy /enforce and it takes effect.Hope it helps

by legj1

Thank you for the help. My apologies to poo_music. Poo, if you give me your e-mail address, I will gladly setup another question worth 150 to give to you. Your question was indeed correct. the scripts were running. I just needed to make my logon script visible so I could logon to As/400 under DOS. Thanks (my email is jlegan@ci.great-falls.mt.us

This discussion is closed to new replies.