+ Post New Thread
Results 1 to 9 of 9
Windows Server 2000/2003 Thread, Where to put Logon Scripts$ in Technical; Whats the difference between the computer config section of AD and the user config section when I come to look ...
  1. #1
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40

    Where to put Logon Scripts$

    Whats the difference between the computer config section of AD and the user config section when I come to look at adding logon scripts. Mine are in the user config but wondering what the difference was if they were in the computer config section.

  2. #2

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    The scripts under the computer config section are computer startup scripts - they're run by the computer as it starts up; the user ones run as the user when they logon.

  3. #3
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40
    Quote Originally Posted by srochford View Post
    The scripts under the computer config section are computer startup scripts - they're run by the computer as it starts up; the user ones run as the user when they logon.
    Does that have any effect on the permissions used by the script? i.e. one at computer start runs as an administrator whereas one run a windows logon relies on what users have admin rights? Reason is I was trying to run a program that required admin rights and just wondered if I put it in the computer config section it would get around that problem. Have sorted problem now but just wondered for future info.

  4. #4

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    Yes - the startup script is running (effectively) as local admin. You can use startup scripts to do things like install software, add drivers, copy files into locations a normal user can't write to etc.

    What you can't do is make changes to a user's settings (because no user is logged on) - you can't set the user wallpaper, for example (but you can change the default wallpaper shown at logon)

  5. Thanks to srochford from:

    TechSupp (10th January 2011)

  6. #5
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40
    Sorry to resurect this thread, just realised had not checked it for replies! Anyway, so if I want a program to install at startup (as a local admin) then I need to put it in Computer Config rather than User Config?
    If you see me at BETT you have the right to slap me for asking inane questions :-)

  7. #6

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,513
    Thank Post
    1,493
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302
    Yup II always deploy software to the PC using that way

  8. Thanks to john from:

    TechSupp (10th January 2011)

  9. #7
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40
    Leading on from that, my MSI installs I have are set up in the user settings section of the policy (as per original instructions I was given when setting them up), should I have set them up in the Computer Settings secton so that if any needed admin privilage thay would have had them?

  10. #8
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,524
    Thank Post
    106
    Thanked 88 Times in 74 Posts
    Blog Entries
    46
    Rep Power
    40
    usually you have software in the computer policy. that applies before logon so software inherently has local admin rights.

    group policy *is* highly confusing.
    if you look at it from ad structure first.
    you have OUs that either contain computers or user objects
    when you attach a policy to the ou.
    if its a computer OU, only do computer settings in the policy
    if its a user OU only do user settings in the policy

    the fact that there's only 1 type of policy and it's down to you to make sure its computer settings applied to computer OUs or user settings applied to user OUs makes it more confusing than it ought to be.

    there's 1 alternative to this picture

    there's a computer policy option called loopback,
    computer config, admin templates, system/group policy, user group policy loopback proccessing mode
    set to enabled, mode=merge

    allows you to apply user settings to computer OUs!

  11. Thanks to browolf from:

    TechSupp (10th January 2011)

  12. #9
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,876
    Thank Post
    295
    Thanked 120 Times in 101 Posts
    Rep Power
    40
    Right, looks like Ineed to tidy that up a bit them and move the msi installs to the computer settings, has worked 'mainly' so far for the small amount of msi's we have but I have tried some and they failed and that I think explains why! We already have loopback enabled as I remember that being an issue when the original installers set it up and were trying to get a global desktop working (it was not set).

SHARE:
+ Post New Thread

Similar Threads

  1. Logon scripts
    By cookie_monster in forum Windows 7
    Replies: 6
    Last Post: 6th May 2009, 09:07 PM
  2. HELP! - Logon Scripts
    By Hedghog in forum Windows
    Replies: 2
    Last Post: 26th September 2008, 10:50 AM
  3. Logon Scripts
    By techyphil in forum Windows
    Replies: 8
    Last Post: 4th September 2008, 06:26 AM
  4. Logon scripts
    By mmoseley in forum Windows
    Replies: 1
    Last Post: 23rd December 2007, 11:46 PM
  5. What do you use for your logon scripts.
    By Kyle in forum How do you do....it?
    Replies: 17
    Last Post: 13th October 2006, 07:54 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •