Different logoff script on certain machines

[PDAC]

Hello,

I'm trying to use group policy to enable a certain group
of machines to execute a different logoff script to the
rest.

I'm running Win2kServer and Win2kPro. Some Win2kPro
machines have recharcheable cordless mice and users keep
forgetting to put them back on charge after use - I'd like
a popup message to appear during logoff reminding them to
park their mice!

I know there are a lot of other ways to do this but GP
*should* make this easy shouldn't it?

I've created an OU under the domain and moved the client
machines which need this special message under this OU
(the structure is fairly flat otherwise). In this new OU
I have created a GPO which only defines the logoff
script. I know the script works OK because when I out it
into the default domain GPO all machines pop this message
up when any user logs out of any machine.

All of the *default* domain group plicy settings are
correctly applied to all machines, even ones in this new
OU. However the machines in the new OU seem to be
ignoring the User settings>Windows settings>logoff script
setting - no machines pop the message up at all.

I've tried setting "No override" on the GPO in the new OU
but this makes no difference.

Does anyone know what I've done wrong?

Thanks - P.

 

[Tom Ausburne]

I think you touched on your own answer. The setting is located in
the User Configuration section and will only apply to the user not
the machine. You should put the users that need this policy in the
OU and see if that doesn't solve the problem.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[P]

Hello Tom,

Thanks for your answer. I still can't shake off the feeling that this
should work [the computer and I seem to disagree on this point! ]

I'm *fairly* new to GP so please be patient if I'm still missing the point -
the effected machines are placed in the new OU and the new OU has GP setting
a particular logoff script. That still sounds to me as if it should work -
shouldn't this mean that users which log on to machines in the new OU should
see the logoff script that is set for that OU? I thought that was one of
the key points of being able to set GP on sub-OUs.

Am I still missing something?

Thanks for your time - your help is appreciated.

P.

 

[Tom Ausburne]

The User section of the policy will only apply to USERS in the OU.
The Computer section of the policy will only apply to COMPUTERS in
the OU.

The exception to this is using Loopback Processing. You can have the
User section apply to any user that logs on to a computer in the OU
by enabling Loopback Processing.

231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

I hope this helps.


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.