Windows 2000 ADV Server -- Logon Scripts Help !!!

[djkball]

I have a windows 2000 ADS server running at one of my cleints sites . They had just told me that they are getting more network appliacations so i wanted to configure logon scipts . What is the best way to get this done , i know you have to right a text file and save it as a batch file . Then do you just link that the user id ?


Such as


Net user H: \\<servername>\<share>\%username% ( this would mapp the user home directory for them )

Net use S: \\<servername>\shared data

Net use lpt2: \\<workstation#2>\<shared printer name >



Then I know i should save this file as something .bat.


Now where do i put this file at , and what should i name it ? Also how do i link that do the user account that is logging in


Please let me know thanks

 

[PeeluckyDuckee]

I don't know much about scripts, if anything at all, but isn't there an option in GPO that will allow you to tackle on startup/logon shutdown/logoff scripts?

 

[err]

If you run Active directory, you can create a GPO and there is a logon and logoff script GPO that you can use. The default location of such script is located on \\domain\sysvol\domain.com\scripts

If you are not running AD or don't want to use AD, which is fine. You should place your scripts on a location that is accesible by your users such as \\servername\openshare and point to that script from the AD User and Computers, user properties, Profile tab, logon script location.

I suggest using GPO as it is much stronger and you can apply startup scripts to computers as well.

Good luck.

eRr

 

[djkball]

Well i think maybe i bit something over my head . Sometimes things seem so easy and not diffcult because i understand the concept . Though i just dont know how to implement it correctly .


So anymore help would be very much accepted

Thanks

 

[err]

djkball,

OK.

Do you run Active directory ? Have you done dcpromo on your Win2K server ?

If so, are you implementing GPO on your AD ?

If you'd like the easy way, you can always only point the script path on each user's properties in AD User and computer MMC.

Let us know more information and we'll guide you step by step.



eRr

 

[djkball]

Yes i have configued ADS ( ran dcpromo) . Though it seems like i didnt configure it to max its benifits . I have edited some of the GPO's that windows comes with , though they were very basic options of enable and disable.

I have also configured folder redirection for users also . Now i see the area for logon/logoff scipts but its empty i would assume as default . So what is the next step i would take in order to get a logon script written to mapp drives for each user . Do you suggest any other settings that i should configure also ?

 

[djkball]

i have been looking more at these gpo's and iam very impressed by all the things you can do . So that brings up a new question .

Could a GPO or a Script be writtten to update the norton on the machine and then scan the machine ? Each machine has nav 01 or nav 02 on it . This isnt the server verison , its the regular one lic per machine

 

[dbwillis]

HI djkball,

The way I set mine up is using the "Domain Security Policy" in Start->Programs->Admin Tools.
Scroll through the many options and under USER settings, there is an option for logon/logoff scripts.
I selected that, then add, then pointed it to the path to my scripts.
The scripts were placed in the NETLOGON folder of the server, (everyone has read access to this share).
I used VBScripts for mine, 1 for logon to map 5 drives, and 1 to logoff to disconnect 5 drives and 1 to set printer.
You should be able to do the same thing with .BAT files, I had also set the scripts to run visible and also asynchronusly (or was it synchronisly?) Id have to check on that one.

Good luck!

 

[err]

If you're still wondering on where to put the files, This is the location that I would suggest as it is replicated through the entire domain:

\\domain\netlogon

The files would be physically located on:
c:\WINNT\SYSVOL\domain\scripts

So on your logon script GPO, you point the logon script to \\domain\netlogon\yourlogonscript.bat

I would also highly suggest utilizing the logoff script to unmap a printer or unmap a drive so that users don't get errors the next time the logon script kicks in.

I would suggest looking into Norton's own liveupdate and scheduled scan jobs in order to accomplish your needs. I am not sure how logon script can do this on regular, non-corporate norton antivirus product.

---------------
A comment
---------------

dbwillis: I wouldn't use the domain security policy and assign logon / logoff script there as it will be applied through the entire domain. Utilizing GPOs are more flexible.

Well, good luck with your adventure

eRr

 

[err]

btw to map and unmap printers on Win2K box, I would use these command instead:

Map printer:
rundll32 printui.dll,PrintUIEntry /in /n\\servername\printerShareName

Unmap printer:
rundll32 printui.dll,PrintUIEntry /dn /n\\servername\printerShareName

eRr