Exclude some users and computers form logout script

[daugavpils]

Hi,

I have some time on this problem and it seems that there must be some
simple solution for it, so maybe someone already have solved it?
We have Windows 2003 domain with relatively simple OU structure,
where each department's users and computers are placed in OUs, e'g'
Sales OU has SalesUsers OU and Sales Computers OU, Research OU has
Research Users and Research Computers OU and so on.Also we have Test OU
and Domain Controllers OU.
There is also All Users GPO linked to domain that defines logout
script in Users section.We needed to exclude certain users and
computers from running this logout script and was quite straightforward
with users - just put them in Nonlogoutscript Grouip and set Deny
access for this group in GPO Security ACL.
However it does not restrict other users from running logout scripts
on Test Machines and Domain Controllers because Logout scripts are
defined in Users section of GPO .
I have tried using Loopback , but it did not make any difference.
If somebody would give me what direction should I turn, I would realy
appreciate it.

Thank you

 

[Guest]

Hi,

I do recall a file called I believe IfMember, this looks at group membership
and you can do things like if member of xx then do this else do that....The
file I think resides in system32 folder, hope this helps 1

 

[daugavpils]

Thank you Ade,

Unfortunately this command checks user membership only.I cannot put
all users in nonologout script group - they need to run logout scripts
from their own machines and not be able to run them when logging out
from test machines...

Thank you for reply anyway!