Jump to content

Recommended Posts

Posted (edited)

Hi,

 

Having trouble getting a user profile logon script (set in AD user properties) called 'unitofsound.bat' to apply after creating an application whitelist with GPO.

 

I have found if I set 'User Config-> Policies-> Windows Settings -> Security Settings -> Software Restriction Policies -> Security levels ->' to Unrestricted unitofsound.bat will successfully map the network drive with drive letter 'P'.

 

If I set 'User Config-> Policies-> Windows Settings -> Security Settings -> Software Restriction Policies -> Security levels ->' to Disallowed, nothing seems to happen.

 

The batch file resides in '\\woodside.local\sysvol\woodside.local\scripts\unitofsound.bat'. I have attached a screenshot of additional rules:

 

gpo.JPG

 

What am I missing here? Would be grateful for any help :)

Edited by ajstan
Posted

IF you have UAC enabled on workstations drive mapping via script can be a tad ropey to say the least.

 

If all the script does is map a drive, I would suggest that you do it with a Group Policy Preference instead, it can then be targeted in all sorts of fun ways.

 

Also if you put the script in the user account, I would suggest that putting the path may involve \\woodside.local\netlogon or %logonserver%\NETLOGON as that is the legacy default path to the location you have said the script is in.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...