Script to install program based on AD group

[FN-GM]

Hi,

I would like a script that will install an application based on the AD group. I have the app and the switches.

I would like it so it checks if the computer is in a group and if it is then check if a file exists on the local machine if it doesn't then run the installer. If not run to the next command for the next bit of software and so on..

I would like it in .bat but i suspect it might need to be .vbs

Does anyone have anything please?

Thanks

[plexer]

If you use a GPO to apply it as a startup script to a spceific OU then only machines in that OU will run it.

You can then do it in a batch file and use the if not exist or if exist statements in your batch file to control what is run.

Ben

[FN-GM]

If you use a GPO to apply it as a startup script to a spceific OU then only machines in that OU will run it.

I know that but i dont wish to go down that route. We will have lots of different apps on different machines and doing that will make things messy.

thanks anyway

[plexer]

Ok then use groups to control who the gpo is applied to instead then saves needing to read ad groups from within your script and makes that simpler as well.

Ben

[FN-GM]

Ok then use groups to control who the gpo is applied to instead then saves needing to read ad groups from within your script and makes that simpler as well.

Ben

I dont want to do that either. I know how to do this but as i originally asked for i would like a script to do this.

[dhicks]

I would like it so it checks if the computer is in a group and if it is then check if a file exists on the local machine if it doesn't then run the installer.

We have a .vbs login script to assign printers by OU of the user or machine, if that's any use to get you started:

Option Explicit
on error resume next

Dim objNetwork, objSysInfo, strUserDN
Dim objGroupList, objUser, objFSO
Dim strComputerDN, objComputer, user

Set objNetwork = CreateObject("Wscript.Network")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objSysInfo = CreateObject("ADSystemInfo")
strUserDN = objSysInfo.userName
strComputerDN = objSysInfo.computerName

' Bind to the user and computer objects with the LDAP provider.
Set objUser = GetObject("LDAP://" & strUserDN)
Set objComputer = GetObject("LDAP://" & strComputerDN)

' Not quite sure why this is in a loop - maybe you just have to wait for Windows to get back to you?
Do While User = ""
 User = lcase(objNetwork.UserName)
Loop

if InStr(strComputerDN, "OU=Staff Room") then
    Run command goes here.
end if

[FN-GM]

We have a .vbs login script to assign printers by OU of the user or machine, if that's any use to get you started:

Option Explicit
on error resume next

Dim objNetwork, objSysInfo, strUserDN
Dim objGroupList, objUser, objFSO
Dim strComputerDN, objComputer, user

Set objNetwork = CreateObject("Wscript.Network")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objSysInfo = CreateObject("ADSystemInfo")
strUserDN = objSysInfo.userName
strComputerDN = objSysInfo.computerName

' Bind to the user and computer objects with the LDAP provider.
Set objUser = GetObject("LDAP://" & strUserDN)
Set objComputer = GetObject("LDAP://" & strComputerDN)

' Not quite sure why this is in a loop - maybe you just have to wait for Windows to get back to you?
Do While User = ""
 User = lcase(objNetwork.UserName)
Loop

if InStr(strComputerDN, "OU=Staff Room") then
    Run command goes here.
end if

Thanks, but i am not good enough to pull that apart.

Does anyone have anything please?

Thanks

[dhicks]

Thanks, but i am not good enough to pull that apart.

You can just cut-and-paste most of that code - it simply sets up a couple of objects to then use to query active directory. You just need to edit the last 3 lines:

if InStr(strComputerDN, "OU=Staff Room") then
Run command goes here.
end if

In this case, replace "Staff Room" with the name of the organisational unit (OU) your computers are in, then add any commands you want to run in the "Run command goes here" - you can simply run an external command:

Set objShell = WScript.CreateObject("WScript.Shell")
objShell.Run "\\server\path\myfile.bat", 1, True

A quick Google for "vbs if file exists" seems to bring up a bunch of code to check if a file exists or not.

[FN-GM]

How would i change from OU to AD group please? Reason being my computers will all be mixed in one OU.

Thanks

[FN-GM]

Bump please

[ricki]

HI

What you could do is create a group and put all the computers that you want to install install the program into the group.

Now create the script to install the program and set the ntfs permissions so that one the group can read it and link the script up to the domain as a group policy low down. I think this is a very strange way of wanting to do this but it would work,

The other way you could do this is with environmental variables. On each machine set an environmental variables. We used to do this with printers say a room number. Then get the script to look for this. I am sorry I dont have the scripts we used here as I am at home.

Richard

[FN-GM]

HI

What you could do is create a group and put all the computers that you want to install install the program into the group.

Now create the script to install the program and set the ntfs permissions so that one the group can read it and link the script up to the domain as a group policy low down. I think this is a very strange way of wanting to do this but it would work,

The other way you could do this is with environmental variables. On each machine set an environmental variables. We used to do this with printers say a room number. Then get the script to look for this. I am sorry I dont have the scripts we used here as I am at home.

Richard

I did think of that but it's abit of a messy way to be honest.

[mac_shinobi]

http://daniel.streefkerkonline.com/v...certain-group/

Check if user is a member of an Active Directory Group - VBForums

A little google fu ??

[glennda]

Can you not setup in gpo so that it only applies if machines are in a group like you can with users?

[FN-GM]

Can you not setup in gpo so that it only applies if machines are in a group like you can with users?

As said before i am well aware of that but i do not wish to do that

@mac_shinobi seen them but they are for checking users, not computers.