Execute a batch file problem

[Netmasker]

I would like to execute a batch file to all my win2k workstations using a
group policy on the win2k server.
Although the other settings (that concern user settings) of the group policy
apply successufully, the
batch file assigned to run on "Startup" does not run.

Here are my settings:
- I am using an OU which has a security group as a member and this group
contains all my win2k workstations.
- I go to the OU properties
- I go to Group Policy/Properties/Security and there I set the "group" (with
the workstations that I mentioned before) and the "authenticated users" to
apply the group policy.
- I edit the OU
- I go to "Computer settings"
- I go to "Windows settings"
- From the "startup" option I assign a batch file in a shared folder on my
server e.g. \\server\share\myfile.bat

On the shared folder I have of course assigned read and execute permissions
for the workstations, the "authenticated users" and the "system".

I have to mention that my batch file does an administration task, so it can
not be run on "user logon".

What do I miss?
Any help appreciated

Thanks in advance

 

[Uncle Stewie]

Just a couple of issues...

1) Your security group does not need to fall within the context of the OU
with the policy... However the objects like computers and users do!
2) The security group that you create must have both the "Read" and the
"Apply Group Policy" settings.
3) Your batch file shouldn't and isn't really out on that network share...
It resides within the context of the policy out the SYSVOL share that falls
out on your DC\dns.domain\policies\{SOMEGUID}... I usually click on the
"Browse" button in the policy dialog... right click on the white space in
the open dialog list box... select "New... Text Document"... and then change
it to "Myfile.bat"... I also edit it in the same manner... right click and
then "Edit"... If you select the file from a network share it will be copied
to this location anyway... I think you need to know that you cannot edit the
file out on your network share and have the changes reflected in the
policy...

Hope that helps!

 

[Kurt]

Security groups do not normally get added to OUs (other than for the
convenience of locating them). You need to add the comptuers themselves to
the OU (and they must be members of the security group, too). Group policy
can specify a script or batch file on any network share as long as you
specify the full UNC path (as in your example), so that should be all it
takes to get it to work. The security group is used to assign permissions to
the policy, and must have "read" and "apply group policy".