RE: WAY OT: Logon Scripts

["Sean" <groups@xxxxxxx>]

Hi there,

What are the clients? Win9X, 2K, XP?

We use a system at work as follow which sounds close, I use a modified
version it at home at the mo.

*	Startup folders are located at c:\startup - so are local which
means if real player or such is installed in a machine the shortcut
error wont pop up in all machines
*	User desktops group based and pulled off the server - these can
be locked with ACLs so the icons don't change
*	Program menus are location based - we use a piece of software
called Ranger to lock down at work the LAN Ranger react is great
(http://www.rangersuite.com/)
*	Start Menus are group based - So various departments have access
to the most common software they use.
*	Registry files are updated with a freeware tool whose name
escapes me at the moment but it runs .reg files without prompting.

Hope this helps I can sent you the old .reg .pol and login scripts these
are mostly aimed at Win98, the new version of ranger kind of ties the
whole mixed network together now.

Sean
--
"No! For I was talking aloud to myself. A habit of the old: they
choose
the wisest person present to speak to; the long explanations needed by
the young are wearying."
-----Original Message-----
From: Rob Mouser [mailto:rob@xxxxxxx]
Sent: 05 December 2003 12:27
To: ukha_d@xxxxxxx
Subject: [ukha_d] WAY OT: Logon Scripts



Hi This is a post on behalf of one of the guys here at work and I know
we've
got some clever folk on this list.



He's trying to achieve the following:



The plan is to use group policy to lock down the users machine so they
cannot access anything except a few select icons on the desktop.



Identical software will be installed in identical locations on each
machine
e.g.



C:\Program Files\TPSIMS\TPSIMS.exe



A folder full of shortcuts will be then created on the server.  Upon
logining into the network the script will delete all existing icons from
the
desktop and copy over the shortcuts from the server.



As well as copying over the shortcuts the login script needs to :



a.       Map drives (already done).

b.       Create folders and copy over certain filers (already done).

c.       Call an executable that alters some registry setting for the
printer (Big group Minolta thing that has to be mapped from each machine
rather than via a shared server install.).  This executable starts to
run
but as the user is not an administrator on the local machine it fails.
Therefore we need to be able to run the script as an administrator
without
having to setup each user as a local administrator.

d.       It would also be useful if the script could create a local
account
for the user giving them standard user privileges.



I hope that makes sense and can it be done?





Many thanks



Rob





[Non-text portions of this message have been removed]