|
To assign user logon scripts |
-
Open the Local Group Policy Editor.
-
In the console tree, click Scripts (Logon/Logoff). The path is User Configuration\Windows Settings\Scripts (Logon/Logoff).
-
In the results pane, double-click Logon.
-
In the Logon Properties dialog box, click Add.
-
In the Add a Script dialog box, do the following:
- In Script Name, type the path to the
script, or click Browse to search for the script file in the
Netlogon shared folder on the domain controller.
- In Script Parameters, type any
parameters that you want, the same way as you would type them on
the command line. For example, if your script includes parameters
called //logo (display banner) and //I (interactive mode), type
//logo //I.
- In Script Name, type the path to the
script, or click Browse to search for the script file in the
Netlogon shared folder on the domain controller.
-
In the Logon Properties dialog box, specify the options that you want:
- Logon Scripts for <Group Policy
object>: Lists all the scripts that currently are assigned
to the selected Group Policy object (GPO). If you assign multiple
scripts, the scripts are processed in the order that you specify.
To move a script up in the list, click it and then click Up.
To move a script down in the list, click it and then click
Down.
- Add: Opens the Add a Script
dialog box, where you can specify any additional scripts to
use.
- Edit: Opens the Edit Script
dialog box, where you can modify script information, such as name
and parameters.
- Remove: Removes the selected script
from the Logon Scripts list.
- Show Files: Displays the script files
that are stored in the selected GPO.
- Logon Scripts for <Group Policy
object>: Lists all the scripts that currently are assigned
to the selected Group Policy object (GPO). If you assign multiple
scripts, the scripts are processed in the order that you specify.
To move a script up in the list, click it and then click Up.
To move a script down in the list, click it and then click
Down.
Additional considerations
- To complete this procedure, you
must have Edit setting permission to edit a GPO. By default,
members of the Domain Administrators security group, the Enterprise
Administrators security group, or the Group Policy Creator Owners
security group have Edit setting permission to edit a
GPO.
- Setting logon scripts to run synchronously
may cause the logon process to run slowly.
- Logon scripts are run as User, not
Administrator, and their rights are limited accordingly.
- Local Group Policy Editor and the Resultant
Set of Policy snap-in are available in Windows Server 2008 R2 and
Windows 7 Professional, Windows 7 Ultimate, and Windows 7
Enterprise. For more information, see http://go.microsoft.com/fwlink/?LinkId=139815.