Logon Script

[Rajesh_rana]

Hi Pegasus,

If you see my email can you please reply to me. I tried to use your script
to allow user to modify registry on the one of our testing terminal server
but it failed. If possible can you explain your script to me- step by step.

Thanks

RR

===========================================================================

Hi,

On our windows2000 terminal servers, users have got minimal rights. servers
are running normal windows applications including OfficeXP. After installing
the Service Pack 2 for Outlook2002, outlook is not allowing automatic
transmission of emails after a process finishes. We are running some VFP 7
programs which allow user to send and email automatically after a process
finished. Because of the complete clampdown on automated emails after
installing SP2 for Outlook, user now gets a dialog box prompting to click
yes/no within few seconds. The dialog box don't appear over any other runing
application window. If user can't click yes within few seconds then no email
is sent through that process.

There is a way around for this problem through Administrative Options for
the Outlook Email security Update. Its a long process but in Short it
requires a registry key to be installed by each user when they logged on to
a terminal server. The problem is that users don't have local admin rights
on the terminal server hence they can't run this registry key which runs
when user logon. This key needs to be run only once on a users profile. We
don't want to give all users local admin access to terminal servers. Is
there any other way by which user can run this Reg key from there profile on
a terminal server.

Any suggestions will be much appreciated.

Thanks

RR

You could do this:

1. Modify the logon script like so:
@echo off
if not exist \\Server\SomeShare\%UserName%
echo %UserName% \\Server\SomeShare\%UserName%
(unwrap line)
insert other commands here

2. Schedule a job to run once every 10 minutes on the
server. It should invoke this batch file:
@echo off
xcopy /m \\Server\SomeShare\*.* %temp%\Action\
for %%a in (%temp%\Action\*.*) do regedit . . . %%a
del /q %temp%\Action\*.*

Explanation:
- When the user logs on for the first time, his logon
script will create a semaphore file, with the archive
attribute set.
- When the next scheduled job runs, it will do several things:
1. Copy the new semaphore files to a working area.
2. Reset the archive attributes of the copied files.
3. Modify the registry for the new user(s).
4. Clear the working area.

The whole process is, of course, centrally controlled and
can be repeated for any other purpose.

 

[Pegasus \(MVP\)]

See below. It would be helpful if you posted your logon
script and also the batch job that you scheduled to run
once every 10 minutes.

Hi Pegasus,

If you see my email can you please reply to me. I tried to use your script
to allow user to modify registry on the one of our testing terminal server
but it failed. If possible can you explain your script to me- step by step.
=========================================================================== profile

You could do this:

1. Modify the logon script like so:
@echo off
if not exist \\Server\SomeShare\%UserName%
echo %UserName% \\Server\SomeShare\%UserName%

*** Create a semaphore file, to prevent the registry hack from running
twice.
*** The name of the semaphore file is the same as the user's logon name.

insert other commands here

2. Schedule a job to run once every 10 minutes on the
server. It should invoke this batch file:
@echo off
xcopy /m \\Server\SomeShare\*.* %temp%\Action\

*** Copy all new semaphore files to the "Action" directory.
*** Reset the archive attribute of the new semaphore files.
*** Ignore the old semaphore files.

for %%a in (%temp%\Action\*.*) do regedit . . . %%a

*** Modify the registry for the new user.

del /q %temp%\Action\*.*

*** Clear the action folder, in preparation for the next run.