Deploying Screensaver

[glennda]

user logon scripts

I have net time in my login scripts

what makes you think its failing on your machines?

Bear in mind it will hang enless you put net time /set /yes otherwise it will sit there asking you to say yes to updating the time. EDIT: this only works if they are power users or administrators which my staff are.

But startup scripts using the script above will work.

[capncrunch]

Thanks for the help folks, I have used your code glendda in a startup script and it succesfully copied the file across to the system32 folder.

[srochford]

I have net time in my login scripts

what makes you think its failing on your machines?

In this support article You cannot set the date, time, or time zone on your computer Microsoft say "By default, only administrators and power users can change the date, time, or time zone."

If net time /set is working for you then at some point you (or someone else) has given ordinary users the right to change the system time. This is potentially dangerous - if the time is changed on a machine by more than 5 minutes relative to the DCs then Kerberos authentication will fail (and the login script can't fix it because you won't be able to login!)

[glennda]

In this support article You cannot set the date, time, or time zone on your computer Microsoft say "By default, only administrators and power users can change the date, time, or time zone."

If net time /set is working for you then at some point you (or someone else) has given ordinary users the right to change the system time. This is potentially dangerous - if the time is changed on a machine by more than 5 minutes relative to the DCs then Kerberos authentication will fail (and the login script can't fix it because you won't be able to login!)

Yeah i think ours are power users (staff only) which is from the by-gone era of when everybody had to be one for Sims to work.

they are set to get the time from the DC so its actually net time /domain:domain.name /set /yes

but then they cannot double click on the date/time in the bottom corner to change nor can they get to the command line to do it from there.

I've edited my post above - although my main point was that login scripts don't run as admin.

plus even if they tried to change the time the dc's change it back anyway when gpo is refreshed.

[sted]

I have net time in my login scripts

what makes you think its failing on your machines?

Bear in mind it will hang enless you put net time /set /yes otherwise it will sit there asking you to say yes to updating the time.

But startup scripts using the script above will work.

making the script visible and adding a pause (and not turning scho off so i can see what its doing ) just says fail (or error message to that effect)

[glennda]

making the script visible and adding a pause (and not turning scho off so i can see what its doing ) just says fail (or error message to that effect)

I've just edited my post above - my staff are power users!

but my main point was about the login scripts running as the user not admin.

[Gibbo]

We have all our machines point to C:\WINDOWS\SYSTEM32\SW.SCR in the registry.

If I want to change the screensaver I just use wake on lan to turn the machines on then run a simple batch file to copy a replacement to all machines.

[capncrunch]

Ok another question, I want to change the screensaver shown at the logon page. I have created a .reg file with the nessecary instructions, I have added that to the startup scripts. However when the computer boots it asks me do i want to add the information to the registry. How can I stop it from asking me if I want to change the registry and make it do it silently with out asking for user intervention?

[Steve21]

Ok another question, I want to change the screensaver shown at the logon page. I have created a .reg file with the nessecary instructions, I have added that to the startup scripts. However when the computer boots it asks me do i want to add the information to the registry. How can I stop it from asking me if I want to change the registry and make it do it silently with out asking for user intervention?

Try /s

e.g. regedit.exe /s regfile.reg
e.g. objShell.Run "regedit /s registry.reg"
or however you're running it

Steve

[capncrunch]

But where do i put the commands? in the .reg file i have set to run in GPO, or in the parameters box in the Startup script GPO?

[Steve21]

But where do i put the commands? in the .reg file i have set to run in GPO, or in the parameters box in the Startup script GPO?

Well how are you running it currently? If you're doing it through script/bat can't you just do a run of it? In your startup script you're running a BAT?

Steve

[capncrunch]

No I am currently running it on it's own. In the GPO it runs a startup script called logon_screensaver.reg.

[Steve21]

No I am currently running it on it's own. In the GPO it runs a startup script called logon_screensaver.reg.

Guess you could try running a script that just does: REGEDIT /S logon_screensaver.reg

Not sure if you can do it direct through GPO, never tried tbh. Try adding a /s or -s to the GPO parameters, but not much use on that side sorry.

Steve

[capncrunch]

Guess you could try running a script that just does: REGEDIT /S logon_screensaver.reg


Steve

I have tried that in the parameters but it still asks me if i want the registry changes to be added.

[glennda]

we just use

reg import logon_screensaver.reg

then make sure the script and logon_screensaver.reg are both saved in the startup folder of the group policy.

I think while logged in it will prompt when running startup it won't.

link