Security Groups and scripts

G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

How do I make and apply a certain GP for a security group in the Active Directory? I am trying to get different groups to run different scripts on startup. Is this the way to do that or am I missing the idea completely? I have seen people discuss something about OU's, I am not familiar with what these are. Sorry for my lack of knowlegde in this field. BTW, I am running Windows 2000 server for the domain controller and windows 2000 and XP pro for the clients.

Thanks.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Normally you create an OU for the users in that group, put the users in that OU and
then create a new GPO for that OU and configure it to your needs. However a startup
script is part of computer configuration and will apply to only computers before any
user logs on running in system context. Logon and logoff scripts apply to users and
run in the context of their user account. An OU is an "Organizational Unit" container
used to organize users and computers for logical organization and/or for different
Group Policy needs. You can also configure a GPO and filter it for a specific group
by giving just that group read and apply permissions to that OU which can complicate
things if used a lot. Keep in mind that policy is applied in this order
local>site>domain>OU where the last policy applied normally wins if the same setting
is applied to more than one policy The links below should be helpful. --- Steve

http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/en-us/distsys/part4/dsgch22.mspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;322176

"Philip" <baggman159@earthlink.net> wrote in message
news:8D1368E6-3627-439C-991E-2EE5D0CDFA87@microsoft.com...
> How do I make and apply a certain GP for a security group in the Active Directory?
I am trying to get different groups to run different scripts on startup. Is this the
way to do that or am I missing the idea completely? I have seen people discuss
something about OU's, I am not familiar with what these are. Sorry for my lack of
knowlegde in this field. BTW, I am running Windows 2000 server for the domain
controller and windows 2000 and XP pro for the clients.
>
> Thanks.