+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Hide logon scripts in Technical; Ive set the option in group policy to hide the legacy logon scipts. So our students wont see the script ...
  1. #1

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387

    Hide logon scripts

    Ive set the option in group policy to hide the legacy logon scipts. So our students wont see the script running but its not working.
    It works fine for network admin staff and teachers but not for students. I can make it work if I add the students to the administrators group but for obvious reasons I dont want to do that.

    I think it is not working because there is something on the local machine that needs changing that students dont have permission to access.
    If this is the case is there an easy way to change it on all of our computers without going round them one by one?

    Anyone out there got any ideas on how to solve this one?

  2. #2
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    All of my logon scripts are vbs and run silently anyway but i've found this that may be useful. i've bolded the one i think may apply to you. It seems that the policy is backwards if this article is correct.

    Four policies for script execution
    Finally, take a look at a few group and local policy settings that control script execution. The User Configuration | Administrative Templates | System | Logon | Logoff branch includes four policies that let you control script execution:

    * Run Logon Scripts Synchronously. Enable this policy if you want to require that all scripts must finish processing before XP displays the user interface. If the policy is disabled, XP can display the user interface while scripts continue to execute.
    * Run Legacy Logon Scripts Hidden. Enable this policy if you want the user to be able to see the account-based logon script execute. The script appears in a console window. The console is hidden if the policy is disabled.
    * Run Logon Scripts Visible. Enable this policy to display the policy-defined logon scripts in a console window, allowing the user to view them as they execute.
    * Run Logoff Scripts Visible. Enable this policy to display the policy-defined logoff scripts in a console window.

  3. #3

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    I dont think it is backwards as it works for staff and not for students and they are getting the settings from the same policy.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,216
    Thank Post
    893
    Thanked 1,773 Times in 1,529 Posts
    Blog Entries
    12
    Rep Power
    461
    what type of script is it?

  5. #5

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    Just a batch script, run from the netlogon directory, mostly maps drives.

  6. #6
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    I suppose if all you want is for them not to see the actual contents of the script you could just
    @ECHO OFF

    at the beginning but this won't stop the console window which i guess is what you want. I'm afraid I'm out of ideas now

  7. #7

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    It is the console window im trying to stop.

    We have had problems with the kids closing it before it finished and not getting all the mapped drives.

    It did used to work but that was when the disks were set up as FAT32 now they are NTFS it has stopped. Which makes me think it is something to do with local permissions.

  8. #8
    pagelad's Avatar
    Join Date
    Dec 2008
    Location
    Newcastle
    Posts
    181
    Thank Post
    4
    Thanked 15 Times in 13 Posts
    Rep Power
    14
    How have you applied the scripts?

    I usually find no matter what settings i put if i attach the scripts to users in AD they appear but if i assign them to OU's in Group Policy they run invisibly

  9. #9

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    They are attached to the user in AD. didnt realise I could assign the via OU in group policy.

  10. #10
    pagelad's Avatar
    Join Date
    Dec 2008
    Location
    Newcastle
    Posts
    181
    Thank Post
    4
    Thanked 15 Times in 13 Posts
    Rep Power
    14
    Quote Originally Posted by JJonas View Post
    They are attached to the user in AD. didnt realise I could assign the via OU in group policy.
    Yeah just create a new GPO, then look in user config, windows settings and scripts.

    Made is so much easier for me to keep track of who has what script!

  11. #11

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    Will this handle kix scripts as well?

  12. #12

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,158
    Thank Post
    404
    Thanked 445 Times in 330 Posts
    Rep Power
    387
    Thanks everybody

    To answer my own question: changes need to be made to the students profile. Which was set to mandatory.
    Last edited by JJonas; 21st January 2009 at 03:55 PM.

  13. #13

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,069 Times in 625 Posts
    Rep Power
    740
    I tend to use START: [ if batch ]

    From Start /?

    Starts a separate window to run a specified program or command.

    START ["title"] [/Dpath] [/I] [/MIN] [/MAX] [/SEPARATE | /SHARED]
    [/LOW | /NORMAL | /HIGH | /REALTIME | /ABOVENORMAL | /BELOWNORMAL]
    [/WAIT] [/B] [command/program]
    [parameters]

    "title" Title to display in window title bar.
    path Starting directory
    B Start application without creating a new window. The
    application has ^C handling ignored. Unless the application
    enables ^C processing, ^Break is the only way to interrupt
    the application
    I The new environment will be the original environment passed
    to the cmd.exe and not the current environment.
    MIN Start window minimized
    MAX Start window maximized
    SEPARATE Start 16-bit Windows program in separate memory space
    SHARED Start 16-bit Windows program in shared memory space
    LOW Start application in the IDLE priority class
    NORMAL Start application in the NORMAL priority class
    HIGH Start application in the HIGH priority class
    REALTIME Start application in the REALTIME priority class
    ABOVENORMAL Start application in the ABOVENORMAL priority class
    BELOWNORMAL Start application in the BELOWNORMAL priority class
    WAIT Start application and wait for it to terminate
    command/program
    If it is an internal cmd command or a batch file then
    the command processor is run with the /K switch to cmd.exe.
    This means that the window will remain after the command
    has been run.

    If it is not an internal cmd command or batch file then
    it is a program and will run as either a windowed application
    or a console application.

    parameters These are the parameters passed to the command/program


    If Command Extensions are enabled, external command invocation
    through the command line or the START command changes as follows:

    non-executable files may be invoked through their file association just
    by typing the name of the file as a command. (e.g. WORD.DOC would
    launch the application associated with the .DOC file extension).
    See the ASSOC and FTYPE commands for how to create these
    associations from within a command script.

    When executing an application that is a 32-bit GUI application, CMD.EXE
    does not wait for the application to terminate before returning to
    the command prompt. This new behavior does NOT occur if executing
    within a command script.

    When executing a command line whose first token is the string "CMD "
    without an extension or path qualifier, then "CMD" is replaced with
    the value of the COMSPEC variable. This prevents picking up CMD.EXE
    from the current directory.

    When executing a command line whose first token does NOT contain an
    extension, then CMD.EXE uses the value of the PATHEXT
    environment variable to determine which extensions to look for
    and in what order. The default value for the PATHEXT variable
    is:

    .COM;.EXE;.BAT;.CMD

    Notice the syntax is the same as the PATH variable, with
    semicolons separating the different elements.

    When searching for an executable, if there is no match on any extension,
    then looks to see if the name matches a directory name. If it does, the
    START command launches the Explorer on that path. If done from the
    command line, it is the equivalent to doing a CD /D to that path.

SHARE:
+ Post New Thread

Similar Threads

  1. HELP! - Logon Scripts
    By Hedghog in forum Windows
    Replies: 2
    Last Post: 26th September 2008, 10:50 AM
  2. Logon Scripts
    By techyphil in forum Windows
    Replies: 8
    Last Post: 4th September 2008, 06:26 AM
  3. Logon scripts
    By mmoseley in forum Windows
    Replies: 1
    Last Post: 23rd December 2007, 11:46 PM
  4. Mac Logon Scripts
    By atfnet in forum Mac
    Replies: 2
    Last Post: 12th September 2007, 06:23 PM
  5. What do you use for your logon scripts.
    By Kyle in forum How do you do....it?
    Replies: 17
    Last Post: 13th October 2006, 07:54 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •