1. dclab (location placement of login script)
Exact steps: GP > User Configuration > Windows Settings > Scripts
(logon/logoff).
Double click logon on right hand pane > Show Files. Windows Explorer will
open listing a path similar to
\\your_domain_name\sysvol\your_domain_name\Policies\{1234...}\User\Scripts\Logon.
Copy the batch file you already have to this path or create one (e.g.
alllogon.bat).
Continue from the last step, click Add > Browse and select alllogon.bat. The
default path is the one indicated previously. You should use this instead of
the one where alllogon.bat is currently located (to allow AD to manage auto
for you).
2. using "Active Directory Users & Computers" tool, assume that you have
created an OU (Organizational Unit) call DEMO. The user USER01 account is
placed inside this OU. A security group GROUP01 has also been created in the
same OU, and USER01 is made a member of it.
Right mouse click the DEMO OU > Properties > Group Policy > New. Give the
new GP a name,
say GP_User_Logon. Click Edit and execute the steps in #1 above.
3. Once step #2 is completed, make sure that GP_User_logon is highlighted >
Properties > Security tab > Add > select GROUP01. With the group still
highlighted, make certain that "Read" and "Apply Group Policy" are ticked on
the Allow column. Click OK all the way back to commit changes.
Step # 3 is optional if you are comfortable to use the default (where
Authenticated Users will get the GP). However, it is included for
completeness in order to allow you to control exactly who will be affected by
the GP you created.
Do keep us posted on any developments.
