BGinfo help!

[Netwacky87]

Hi All,

 

This problem is really annoying me and im sure its something simple,

 

I want to run bginfo at startup so ive made a startup script as follows:

 

start "\\nelson\Netlogon\BGinfo.exe \\nelson\Netlogon\bginfo\logon.bgi /timer:0"

 

Right, ive asigned it in group policy to machines but its just not working...i dont want to deploy it to the local machine i just want to run it from a share from a server, im sorry if this has been discussed before but i cant for the life of me figure it out! :@:@

[ITWombat]

I think the quotes are only requirde for a window title. It could be that the command processor thinks that the bginfo command is the title and has thrown a syntax error because it can't find what it thinks is a command.

[maniac]

Insted of calling it from a script, if you program it to be directly run as a logon script its self within group policy, it will work. Put in;

 

\\nelson\Netlogon\BGinfo.exe as the file name and

 

\\nelson\Netlogon\bginfo\logon.bgi /timer:0 in the box marked perameters.

 

This is how I had mine setup, although we stopped using it now as it caused us a few problems. (nothing technical, but we found if the students knew the machine names, a few of them were exploiting the messaging functions, so we turned off BGinfo and re-named our machines, we do use the messageing functions legitimately, so we didn't want to loose them!)

 

Mike.

[rasssp]

I cannot seem to get this to work at all.

 

I have it set on login script as above:

 

\\server\netlogon\bginfo\bginfo.exe

 

\\server\netlogon\bginfo\student.bgi /timer:0

 

but nothing shows, just normal blue desktop. Do any group policys interfre with this? we were using gpo wallpaper but it just gives us a headache.

 

all I need is to be able to have the wallpaper on a server share (as we use it for important info and to advertise school events) so we can change it, and just display the machine name and username on the screen

 

Any ideas?

[IanT]

I just create a shortcut of bginfo.exe and dump it in the Startup folder for all users on my servers

 

Works fine!

[Michael]

I think bginfo.exe must be copied to the local machine. It's only 700K so won't cause any problems, even on wireless.

 

This is what I use:

 

@ECHO OFF
net time \\SERVERNAME /set /yes
REM * Sets Background desktop *
if exist %systemroot%\bginfo.exe goto BGINFO
copy \\SERVERNAME\netlogon\BGINFO\BGINFO.EXE %SYSTEMROOT% /Y
:BGINFO
%SYSTEMROOT%\bginfo.exe /i"\\SERVERNAME\netlogon\bginfo\Adminlogon.bgi" /timer:0

REM * Sets Background desktop *
%SYSTEMROOT%\bginfo.exe /i"\\SERVERNAME\netlogon\bginfo\logoff.bgi" /timer:0

[rasssp]

I think bginfo.exe must be copied to the local machine. It's only 700K so won't cause any problems, even on wireless.

 

This is what I use:

 

@ECHO OFF
net time \\SERVERNAME /set /yes
REM * Sets Background desktop *
if exist %systemroot%\bginfo.exe goto BGINFO
copy \\SERVERNAME\netlogon\BGINFO\BGINFO.EXE %SYSTEMROOT% /Y
:BGINFO
%SYSTEMROOT%\bginfo.exe /i"\\SERVERNAME\netlogon\bginfo\Adminlogon.bgi" /timer:0

REM * Sets Background desktop *
%SYSTEMROOT%\bginfo.exe /i"\\SERVERNAME\netlogon\bginfo\logoff.bgi" /timer:0

 

Do you run this in the login script as a bat?

 

also, what are the two bgi's? I only have one

[Michael]

Yes my login scripts are bat files. The two bgi files are for the user logon:

 

Adminlogon.bgi, Stafflogon.bgi or Studentlogon.bgi

 

So the desktop looks different for different user levels (hope this makes sense).

 

Logoff.bgi is used on the Windows logon/logoff screen (where you press ctrl+alt+del) and enter your username and password. Typically this is where I write the school name which looks smart.

Edited October 2, 2008 by Michael

[rasssp]

Cheers, you are a genius! I now have it working woo

[Chuckster]

Is that a startup script? And does the bat file actually copy the bginfo.exe to the systemroot folder if it doesn't already exist?

 

Also, how can you get it to display the free space on a users home directory?

This is drive letter H:\ for us.

[rasssp]

Is there a way to change the colour of the icon text, we use a white background image, but xp uses white text with shadows and its not all that clear.

 

grey icon text would be good, but not sure how :\

[rasssp]

you also need to add the /accepteula comment to the /i on bginfo.exe

[gshaw]

Here's the way I've done it... saves using the stupid GPO wallpaper setting as well

 

You need...

 

- folder on the server (sysvol or netlogon ideal) to store the .bgi file and .bmp for the wallpaper

- exe copied to the C: drive of each computer via script

- logon script to run it

 

So add this as part of your startup script for machines...

 

if exist c:\windows\bgibmp goto copyexe

mkdir c:\windows\bgibmp

cacls "c:\windows\bgibmp" /E /G "Authenticated Users":F

 

:copyexe

 

if exist c:\windows\bgibmp\bginfo.exe goto lastbit

copy "\\domain\sysvol\domain\usersettings\tools\Bginfo.exe" c:\windows\bgibmp /Y

 

:lastbit

exit

On a logon script assigned to users OU have this bit...

 

c:\windows\bgibmp\bginfo.exe /i"\\domain\sysvol\domain\UserSettings\tools\teachpc.bgi" /accepteula /timer:0

 

Bit above assumes you domain is called domain and the .bgi file is in usersettings\tools under sysvol. Just change as required

 

End result is this...

 

http://i61.photobucket.com/albums/h61/thecyberrat69/screens.jpg

Edited October 2, 2008 by gshaw

[Michael]

Is that a startup script? And does the bat file actually copy the bginfo.exe to the systemroot folder if it doesn't already exist?

 

No, it's a logon script.

 

Also, how can you get it to display the free space on a users home directory?

This is drive letter H:\ for us.

 

I'm not quite sure how to do this. If you use the value it works for the local C:\ drive only. Not sure how to change this to a home directory such as H:\

 

--------------------------------------------------------------------------------

 

Is there a way to change the colour of the icon text, we use a white background image, but xp uses white text with shadows and its not all that clear.

 

grey icon text would be good, but not sure how :\

 

If you double click your bgi file, this should automatically open using BGINFO.exe as they are associated. You can change the font colour using the built in toolbar and highlighting the relevant text.

[Chuckster]

Here's the way I've done it... saves using the stupid GPO wallpaper setting as well

 

You need...

 

- folder on the server (sysvol or netlogon ideal) to store the .bgi file and .bmp for the wallpaper

- exe copied to the C: drive of each computer via script

- logon script to run it

 

So add this as part of your startup script for machines...

 

if exist c:\windows\bgibmp goto copyexe

mkdir c:\windows\bgibmp

cacls "c:\windows\bgibmp" /E /G "Authenticated Users":F

 

:copyexe

 

if exist c:\windows\bgibmp\bginfo.exe goto lastbit

copy "\\domain\sysvol\domain\usersettings\tools\Bginfo.exe" c:\windows\bgibmp /Y

 

:lastbit

exit

On a logon script assigned to users OU have this bit...

 

c:\windows\bgibmp\bginfo.exe /i"\\domain\sysvol\domain\UserSettings\tools\teachpc.bgi" /accepteula /timer:0

 

Bit above assumes you domain is called domain and the .bgi file is in usersettings\tools under sysvol. Just change as required

 

End result is this...

 

http://i61.photobucket.com/albums/h61/thecyberrat69/screens.jpg

 

Wow. I'm loving the wallpapers. Could I have a copy, please?

[Chuckster]

No, it's a logon script.

 

 

 

I'm not quite sure how to do this. If you use the value it works for the local C:\ drive only. Not sure how to change this to a home directory such as H:\

 

--------------------------------------------------------------------------------

 

 

 

If you double click your bgi file, this should automatically open using BGINFO.exe as they are associated. You can change the font colour using the built in toolbar and highlighting the relevant text.

 

 

Thanks for your help, mate. Much appreciated.

[gshaw]

No, it's a logon script.

 

But will the currently logged on user have write access to the SYSTEMROOT folder? Think that's why I ended up making it copy via startup script which has machine's rights, plus also changing the rights on the bgibmp folder I made, as bginfo puts the created bitmap in there when it's merged the original background with the text...

 

If you double click your bgi file, this should automatically open using BGINFO.exe as they are associated. You can change the font colour using the built in toolbar and highlighting the relevant text.

 

I might be wrong but think JMChapman means the icon label text rather than the BGInfo text?

 

Wow. I'm loving the wallpapers. Could I have a copy, please?

 

Here ya go... to get the red one just load in Photoshop, CTRL+U then tick the Colorize box and enjoy

[Chuckster]

Thanks GShaw. Erm, I don't have Photoshop. Do you think you could colorize it for me?

[gshaw]

Yeah no prob... see below

 

Use this as a freebie alternative to Photoshop... better than nowt

 

GIMPshop.com - A GIMP hack by Scott Moschella

[Michael]

But will the currently logged on user have write access to the SYSTEMROOT folder? Think that's why I ended up making it copy via startup script which has machine's rights, plus also changing the rights on the bgibmp folder I made, as bginfo puts the created bitmap in there when it's merged the original background with the text...

 

The technique I use is to add "domain users" to the local administrators group via MMC. It solves a whole range of application related problems which can write locally if required. Using GPOs I hide and deny access to C:\ to users, but applications can still write locally - including BGInfo

[DMcCoy]

The technique I use is to add "domain users" to the local administrators group via MMC. It solves a whole range of application related problems which can write locally if required. Using GPOs I hide and deny access to C:\ to users, but applications can still write locally - including BGInfo

 

This is a bad idea. Profiles are a security issue as users can easily access them remotely and get at confidential data that is held temporarily/permanently there.

 

It would just have been easier to use the options in BGInfo to write to the USERS temporary folder instead of C. This is mentioned when using BGInfo to create the BGI file.

 

There is virtually no reason why any user needs local admin rights these days. As I said, it is potentially a DPA issue, and you should at minimum use a different group for admin and student machines when allowing local admin user rights.

 

I add a Local Admin - Students and Local Admin - Staff group to the admin group on the different sets of machines for the rare exceptions that are needed for a tiny number of staff.

[DMcCoy]

For future searches.

 

PLEASE READ THIS PEOPLE!

 

There is an OPTION in BGInfo

 

Bitmap -> Location -> Users Temporary Directory

[Michael]

This is a bad idea. Profiles are a security issue as users can easily access them remotely and get at confidential data that is held temporarily/permanently there.

 

Adding "domain users" as local administrators allows applications to cache/write locally. The local C:\ drive is hidden and inaccessible from users, by enabling these two policies:

 

Hide these specified drives in My Computer - Enabled

Prevent access to drives from My Computer - Enabled

 

There is virtually no reason why any user needs local admin rights these days. As I said, it is potentially a DPA issue, and you should at minimum use a different group for admin and student machines when allowing local admin user rights.

 

I must be unlucky then as schools always want to use old or technically challenged software. I've not had a single incident of a pupil breaking this setup. I can only recommend you try it

[DMcCoy]

Adding "domain users" as local administrators allows applications to cache/write locally. The local C:\ drive is hidden and inaccessible from users, by enabling these two policies:

 

Hide these specified drives in My Computer - Enabled

Prevent access to drives from My Computer - Enabled

 

 

 

I must be unlucky then as schools always want to use old or technically challenged software. I've not had a single incident of a pupil breaking this setup. I can only recommend you try it

 

Those restrictions only apply to Explorer and do not protect the drives from being accessed by any other application that does not use the explorer interface.

 

Plug any machine into the network and browse to the admin machines, with domain users as members of local admins anyone entering their password has full access to go snooping through peoples profile. Any file names in the recent docs people shouldn't see? Any cached pst files in there?

[Guest Guest]

I must be unlucky then as schools always want to use old or technically challenged software. I've not had a single incident of a pupil breaking this setup. I can only recommend you try it

 

Ive never came accross any software which needs full admin rights to every file on the c:\ drive, and im quite sure in saying thats because there isnt any such program.

 

You only need give write permissions to the files/folders/regkeys the program/user actually needs to write to. Although educational software can want access to insane places, most of the time at worst you only have to give write access to its own program folder in program files.

 

Use Filemon and Regmon to see what is accessed. And use CACLS and SubACL to write the permissions as part of your deployment of the application.