Is there a reason to store Logon Script in one of these places...

Discussion in 'Server Setup' started by Kelvin, Aug 6, 2009.

  1. Kelvin

    Kelvin Guest

    I've been storing my logon scripts (batch files) in this folder.
    "C:\WINDOWS\SYSVOL\sysvol\Domain.local\scripts"

    I'm in the process of creating a logon script (VBScript based) and when I
    was going to attach it to the GPO I noticed that the browse buttom opens to
    here by default.
    "C:\WINDOWS\SYSVOL\sysvol\Domain.local\Policies\{F312224C-9044-4003-BF9D-B3E350E3D44C}\User\Scripts\Logon"

    Is there a right or wrong place to store the logon scripts?
    I seem to recall that there is synchronization from some part of this
    directory structure between the Domain Controller and backup Domain
    Controller...


    Thanks

    Kelvin
     
    Kelvin, Aug 6, 2009
    #1
    1. Advertisements

  2. Kelvin

    Marcin Guest

    Kelvin,
    either is acceptable - although the first method (leveraging the Netlogon
    share) is probably less common (since this is a legacy approach, which does
    not rely on Group Policies, but instead involves modifying Logon script user
    attribute via Profile tab of user's Properties dialog box in Active
    Directory Users and Computers). Group Policies give you more flexibility
    (multiple logon scripts - if needed) and improved manageability...

    hth
    Marcin
     
    Marcin, Aug 6, 2009
    #2
    1. Advertisements

  3. Kelvin

    Kelvin Guest

    Thanks for the reply, I'm going to use the script in my GPO so will locate
    the script where AD looks for it by default...

    Thanks

    Kelvin
     
    Kelvin, Aug 6, 2009
    #3
  4. If you use the GPO, then the folder it uses by default is the correct one.
    It becomes very difficult to navigate to that folder in Windows Explorer, so
    use the GPO edit GUI. This is explained a bit in this logon script FAQ:

    http://www.rlmueller.net/LogonScriptFAQ.htm

    One point. If you specify a logon script in a GPO, and also have a logon
    script specified on the "Profile" tab of ADUC, both will run. The GPO is
    preferred, as long as all clients are Windows 2000 or above.
     
    Richard Mueller [MVP], Aug 6, 2009
    #4
  5. I agree with the others, place the script within the gpo.

    --
    Paul Bergson
    MVP - Directory Services
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewsGroup This
    posting is provided "AS IS" with no warranties, and confers no rights.
     
    Paul Bergson [MVP-DS], Aug 7, 2009
    #5
  6. Richard,

    I've used that method (browse button in the GPO script location) for years.
    It's easy instead of trying to figure out which GPO in SYSVOL and which
    subfolder, to put it in.


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum to benefit from collaboration
    among responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [MCT], Aug 7, 2009
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.