| Author | Messages | |
balansay
Posts:2
 | | 02/26/2009 4:05 PM |
| Hi awesome GP Talk list!
Here is the scenario:
(Server 2003 Domain, XP SP3 Workstations)
There are 2 icons that are actually shortcuts to a network drive that runs 2
of 38 .bat files.
Depending on where the machine is located, determines which .bat file is run
/ where the shortcut points to.
For example:
Billing Department machines receives 2 shortcut icons that point to a
network share which relate to a .bat file that is associated with the
Billing Department.
Admin Department machines receives 2 shortcut icons that point to a network
share which relate to a .bat file that is associated with the Admin
Department.
etc. Therefore 19 departments with 2 icons for each department = the 38
.bat files. =)
---------
What I am considering:
Create new Global groups for each of the 19 departments, populate each
department with respected machines (add machine to 'member of'). Create 19
Machine Startup Scripts that will copy the department appropriate shortcuts
onto each machine (all users desktop).
Assign each of the 19 scripts to be "read" & "apply" to the appropriate
global group that was just created for each department.
---------------
Well, although there is some slight automation, it seems this process can be
further optimized. Does this list have any suggestions?
Ideally, it would be great to have 1 machine startup script assigned to all
machines, then, based on the machines description in AD, copy the
appropriate shortcut icons. Is this an appropriate job for digging into my
Windows Scripting Host books? kix maybe? I haven't researched powershell
(though seems similar to WSH), but if deemed 'best' I can look into that as
well.
Thanks for any insight!
Edgardo
| | | |
| omar
Posts:97
| | 02/26/2009 4:40 PM |
| <html><body><span style="font-family:Arial; color:#000000; font-size:10pt;"><DIV>Originally I would have suggested a user login script and I would utilize ifmember.exe from the Windows 2003 support tools or resource kit- I forget where to find that exe.</DIV>
<DIV> </DIV>
<DIV>user logon script:</DIV>
<DIV>I dont know that a computer start up script would work unless there are dedicated stations per department.</DIV>
<DIV> </DIV>
<DIV>I would lean toward user logon scripts- and if Kix-great- but there is always the good old- "ifmember.exe"</DIV>
<DIV> </DIV>
<DIV>using ifmember.exe and a simple set of commands to check for a file's existence (your shortcuts on the desktop path) and if not there copy- if there- end the script. This is something you can get tested and in production within a few days.</DIV>
<DIV> </DIV>
<DIV>The only challenge you have then is to configure the GPOs and workstations to ensure that a user logon script is run during logon.</DIV>
<DIV> </DIV>
<DIV>Now though- I would suggest Group Policy preferences as there is a way to use GPP and target specific shortcuts based on your group memberships.</DIV>
<DIV> </DIV>
<DIV>Here is a link to a short overview:</DIV>
<DIV><a href="http://support.microsoft.com/kb/943729">http://support.microsoft.com/kb/943729</a></DIV>
<DIV> </DIV>
<DIV>What I dont recall is if a Windows 2003 server will present these settings to clients that ahve the GGP client side extension installed. I do know that XP clients can process the GPP but will Windows 2003 DCs give this information to the client?</DIV>
<DIV> </DIV>
<DIV>Oh- you will need at least one vista or server 208 machine to create the new GPOs with preferences-but you would need to test if a win2k3 DC will send those settings out unless someone else can answer that question.</DIV>
<DIV> </DIV>
<DIV>hope that helps some,</DIV>
<DIV> </DIV>
<DIV>Omar</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<BLOCKQUOTE style="PADDING-LEFT: 8px; FONT-SIZE: 10pt; MARGIN-LEFT: 8px; BORDER-LEFT: blue 2px solid; COLOR: black; FONT-FAMILY: verdana" webmail="1">
<DIV>-------- Original Message --------<BR>Subject: [gptalk] Deploy certain Icons to Specific Computers?<BR>From: Edgardo Balansay <xxxxxxxxxxxxxxxx><BR>Date: Thu, February 26, 2009 12:59 pm<BR>To: xxxxxxxxxxxxxxxx<BR><BR>
<DIV>Hi awesome GP Talk list!</DIV>
<DIV> </DIV>
<DIV>Here is the scenario:</DIV>
<DIV> </DIV>
<DIV>(Server 2003 Domain, XP SP3 Workstations)</DIV>
<DIV>There are 2 icons that are actually shortcuts to a network drive that runs 2 of 38 .bat files.</DIV>
<DIV> </DIV>
<DIV>Depending on where the machine is located, determines which .bat file is run / where the shortcut points to.</DIV>
<DIV> </DIV>
<DIV>For example:</DIV>
<DIV> </DIV>
<DIV>Billing Department machines receives 2 shortcut icons that point to a network share which relate to a .bat file that is associated with the Billing Department.</DIV>
<DIV>Admin Department machines receives 2 shortcut icons that point to a network share which relate to a .bat file that is associated with the Admin Department.</DIV>
<DIV> </DIV>
<DIV>etc. Therefore 19 departments with 2 icons for each department = the 38 .bat files. =)</DIV>
<DIV> </DIV>
<DIV>---------</DIV>
<DIV>What I am considering:</DIV>
<DIV> </DIV>
<DIV>Create new Global groups for each of the 19 departments, populate each department with respected machines (add machine to 'member of'). Create 19 Machine Startup Scripts that will copy the department appropriate shortcuts onto each machine (all users desktop).</DIV>
<DIV> </DIV>
<DIV>Assign each of the 19 scripts to be "read" & "apply" to the appropriate global group that was just created for each department.</DIV>
<DIV> </DIV>
<DIV>---------------</DIV>
<DIV> </DIV>
<DIV>Well, although there is some slight automation, it seems this process can be further optimized. Does this list have any suggestions?</DIV>
<DIV> </DIV>
<DIV>Ideally, it would be great to have 1 machine startup script assigned to all machines, then, based on the machines description in AD, copy the appropriate shortcut icons. Is this an appropriate job for digging into my Windows Scripting Host books? kix maybe? I haven't researched powershell (though seems similar to WSH), but if deemed 'best' I can look into that as well.</DIV>
<DIV> </DIV>
<DIV>Thanks for any insight!</DIV>
<DIV>Edgardo</DIV>
<DIV> </DIV></DIV></BLOCKQUOTE></span></body></html>
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx
List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx
List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive
List archive (off-site): http://www.freelists.org/archives/gptalk
| | | |
| Martin_Hugo
Posts:26
| | 02/26/2009 4:43 PM |
| Hi Edgardo,
Have you considered deploying the icons based on the user (not the machine)
and use a logon script instead of a startup script? That way you could use
ifmember.exe to check for group membership and deploy the icons based on the
users group. This would have the advantage that the user would get their
bat files no matter where they login. Additionally, users could have
equipment replaced without a bunch of script changes having to be made.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of xxxxxxxxxxxxxxxx
Sent: Thursday, February 26, 2009 4:00 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Deploy certain Icons to Specific Computers?
Importance: Low
Hi awesome GP Talk list!
Here is the scenario:
(Server 2003 Domain, XP SP3 Workstations)
There are 2 icons that are actually shortcuts to a network drive that runs 2
of 38 .bat files.
Depending on where the machine is located, determines which .bat file is run
/ where the shortcut points to.
For example:
Billing Department machines receives 2 shortcut icons that point to a
network share which relate to a .bat file that is associated with the
Billing Department.
Admin Department machines receives 2 shortcut icons that point to a network
share which relate to a .bat file that is associated with the Admin
Department.
etc. Therefore 19 departments with 2 icons for each department = the 38
.bat files. =)
---------
What I am considering:
Create new Global groups for each of the 19 departments, populate each
department with respected machines (add machine to 'member of'). Create 19
Machine Startup Scripts that will copy the department appropriate shortcuts
onto each machine (all users desktop).
Assign each of the 19 scripts to be "read" & "apply" to the appropriate
global group that was just created for each department.
---------------
Well, although there is some slight automation, it seems this process can be
further optimized. Does this list have any suggestions?
Ideally, it would be great to have 1 machine startup script assigned to all
machines, then, based on the machines description in AD, copy the
appropriate shortcut icons. Is this an appropriate job for digging into my
Windows Scripting Host books? kix maybe? I haven't researched powershell
(though seems similar to WSH), but if deemed 'best' I can look into that as
well.
Thanks for any insight!
Edgardo
| | | |
| Syspro
Posts:0
| | 02/26/2009 4:48 PM |
| Hi Edgardo,
I think you should be looking at Group Policy Preferences. They are awesome
This is the latest additions to Group Policies and was designed to do
exactly what you are trying to do. It allows you to define things to do
(like copying files/shortcuts etc) and allows you to put conditional
processing on it (e.g Machine group membership)
This way you would only need one GPO and all of the information is stored in
there.
And it even goes further. I am not sure what you are doing in the BAT file,
but you may not even need the bat file. You may be able to use Group Policy
Preferences to do the work (create shortcuts, connect printers, copy files
etc)
Darren mentioned Group Policy Preferences recently and I quote
If you do a search for "Group Policy Preferences" at download.microsoft.com,
you'll find a whitepaper overview and the downloads of the client pieces.
Also, I wrote an overview whitepaper at www.gpoguy.com. Bottom line is that
its something you have to install and plan for , but its not terribly hard
to implement.
Alan Cuthbertson
Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Edgardo Balansay
Sent: Friday, 27 February 2009 8:00 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Deploy certain Icons to Specific Computers?
Hi awesome GP Talk list!
Here is the scenario:
(Server 2003 Domain, XP SP3 Workstations)
There are 2 icons that are actually shortcuts to a network drive that runs 2
of 38 .bat files.
Depending on where the machine is located, determines which .bat file is run
/ where the shortcut points to.
For example:
Billing Department machines receives 2 shortcut icons that point to a
network share which relate to a .bat file that is associated with the
Billing Department.
Admin Department machines receives 2 shortcut icons that point to a network
share which relate to a .bat file that is associated with the Admin
Department.
etc. Therefore 19 departments with 2 icons for each department = the 38
.bat files. =)
---------
What I am considering:
Create new Global groups for each of the 19 departments, populate each
department with respected machines (add machine to 'member of'). Create 19
Machine Startup Scripts that will copy the department appropriate shortcuts
onto each machine (all users desktop).
Assign each of the 19 scripts to be "read" & "apply" to the appropriate
global group that was just created for each department.
---------------
Well, although there is some slight automation, it seems this process can be
further optimized. Does this list have any suggestions?
Ideally, it would be great to have 1 machine startup script assigned to all
machines, then, based on the machines description in AD, copy the
appropriate shortcut icons. Is this an appropriate job for digging into my
Windows Scripting Host books? kix maybe? I haven't researched powershell
(though seems similar to WSH), but if deemed 'best' I can look into that as
well.
Thanks for any insight!
Edgardo
| | | |
| Darren
Posts:103
| | 02/26/2009 4:48 PM |
| Omar-
Yes, Server 2003 is simply storing the settings in SYSVOL so there’s no issue with it and GPP. So I would definitely recommend GPP in this scenario.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Thursday, February 26, 2009 1:32 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Deploy certain Icons to Specific Computers?
Originally I would have suggested a user login script and I would utilize ifmember.exe from the Windows 2003 support tools or resource kit- I forget where to find that exe.
user logon script:
I dont know that a computer start up script would work unless there are dedicated stations per department.
I would lean toward user logon scripts- and if Kix-great- but there is always the good old- "ifmember.exe"
using ifmember.exe and a simple set of commands to check for a file's existence (your shortcuts on the desktop path) and if not there copy- if there- end the script. This is something you can get tested and in production within a few days.
The only challenge you have then is to configure the GPOs and workstations to ensure that a user logon script is run during logon.
Now though- I would suggest Group Policy preferences as there is a way to use GPP and target specific shortcuts based on your group memberships.
Here is a link to a short overview:
http://support.microsoft.com/kb/943729
What I dont recall is if a Windows 2003 server will present these settings to clients that ahve the GGP client side extension installed. I do know that XP clients can process the GPP but will Windows 2003 DCs give this information to the client?
Oh- you will need at least one vista or server 208 machine to create the new GPOs with preferences-but you would need to test if a win2k3 DC will send those settings out unless someone else can answer that question.
hope that helps some,
Omar
-------- Original Message --------
Subject: [gptalk] Deploy certain Icons to Specific Computers?
From: Edgardo Balansay <xxxxxxxxxxxxxxxx>
Date: Thu, February 26, 2009 12:59 pm
To: xxxxxxxxxxxxxxxx
Hi awesome GP Talk list!
Here is the scenario:
(Server 2003 Domain, XP SP3 Workstations)
There are 2 icons that are actually shortcuts to a network drive that runs 2 of 38 .bat files.
Depending on where the machine is located, determines which .bat file is run / where the shortcut points to.
For example:
Billing Department machines receives 2 shortcut icons that point to a network share which relate to a .bat file that is associated with the Billing Department.
Admin Department machines receives 2 shortcut icons that point to a network share which relate to a .bat file that is associated with the Admin Department.
etc. Therefore 19 departments with 2 icons for each department = the 38 .bat files. =)
---------
What I am considering:
Create new Global groups for each of the 19 departments, populate each department with respected machines (add machine to 'member of'). Create 19 Machine Startup Scripts that will copy the department appropriate shortcuts onto each machine (all users desktop).
Assign each of the 19 scripts to be "read" & "apply" to the appropriate global group that was just created for each department.
---------------
Well, although there is some slight automation, it seems this process can be further optimized. Does this list have any suggestions?
Ideally, it would be great to have 1 machine startup script assigned to all machines, then, based on the machines description in AD, copy the appropriate shortcut icons. Is this an appropriate job for digging into my Windows Scripting Host books? kix maybe? I haven't researched powershell (though seems similar to WSH), but if deemed 'best' I can look into that as well.
Thanks for any insight!
Edgardo
Subscriber Help: http://www.gpoguy.org/Subscribers-FAQ.aspx List Info: http://www.gpoguy.com/GPTalk-Mailing-List.aspx List archive (on-site): http://www.gpoguy.com/GPTalk-Mailing-List.aspx#archive List archive (off-site): http://www.freelists.org/archives/gptalk
| | | |
| balansay
Posts:2
| | 02/26/2009 6:08 PM |
| On Thu, Feb 26, 2009 at 1:37 PM, Martin Hugo <xxxxxxxxxxxxxxxx> wrote:
> Have you considered deploying the icons based on the user (not the
> machine) and use a logon script instead of a startup script?
>
Thanks all for the suggestions! It appears "Group Policy Preferences" is
something to look into that I did not consider. Thus, setup a test/admin
Vista machine to create/modify the new GPO w/ preferences, which Server 2003
simply stores the settings in SYSVOL. <-- Thanks Omar, Darren, & Alan for
that.
As for deploying icons upon user login, perhaps I should have
mentioned: some users move from department to department and all users have
redirected desktops. In this case, users are members of different
departments simultaneously. Which is my reasoning for deploying based on
computer membership. =)
Thanks again!
Edgardo
fwiw, the shortcuts perform a 'net send' (ducks beneath desk =) hey, we're
firewalled pretty good here  ) informing the building of a possible
distress situation, located where the net send message is "from" Each icon
shortcut message is a 'yellow' or 'red' alert message from department.
| | | |
|
|