assign default printer based on computer's group membership

Thank you for the response. This looks like it might just do what I want it to do. I do have two questions.
First, this will work for Windows 2000 as well as Windows XP, right (I don't see why it wouldn't, but one solution I tried was supposed to work for both but didn't work for Windows 2000)?
Second, what modifications would I have to make to the above if I wanted to just add the printers rather than set a default printer (in some cases I'm connecting 4 or 5 printers)? I had originally wanted to set the default printer, but there are some users that have local printers and I don't want to override their default printer settings by assigning them a network printer as their default printer. Since the first printer that gets added gets set as the default, then just by adding the printer I want as the default printer before I add the other network printers, I should be OK.
I'm currently implementing a very convoluted method of searching text files that isn't working out so well so this script will be a very welcome change.

Thank you,
Daniel

Good morning, Dan.

I just tested the code, first chance I've had, and found one error.  Change this line

    If objGroup.IsMember(objComputer.ADsPath) Then

to

    If objGroup.IsMember(objComputer.ADsPath & "$") Then

in the IsGroupMember function.

Yes, this should work for both 2000 and XP.  I've tested on XP and can vouch for it there.  Unfortunately, I don't have a 2000 PC connected to my AD network so I can't test there.  To add a printer connection instead of setting one as default, switch this command

    objNetwork.SetDefaultPrinter "PrinterName"

to

    objNetwork.AddPrinterConnection "\\Server\PrinterName"

I'll give this a try tomorrow when I get to work and let you know how it goes.

Thanks for the input.

OK, I got the scripts working, but I'm not sure how to integrate them into my current scripts. Since I'm using batch files to do everything else, I'm not quite sure how to get these scripts to run when I want them to.

If you could take a look at what I've got, and give me some suggestions, I would appreciate it.

Here is what I've got. One main OU that I manage. That OU contains 6 other OUs which represent the 6 sites that I'm responsible for. Two of these OUs are in the same building and on the same IP subnet, but the rest are all at different sites, in their own building and have their own unique IP subnet.

Right now, my GPO is applied to the main OU and that is where my login script is running from. Here is what it is doing:

-Checks if user is in the Main OU admins group, if yes, maps admin shared folders to X:, Y:, and Z:.
-Checks through each "OU Users" group (a group that contains all the users for that OU/site) and maps the public folder on the file server at that site to P: (so if a user is in the OU3 Users group, it would map P: to \\ou3server\public)
-Checks  if user is in a Shared Folders group and maps S: to \\OU2\Shared
-Determines which site the user is at based on IP address (the two OUs that are on the same subnet are considered the same site for this purpose)
-based on location (determined above by IP address), connect network printers (this is where the vbs scripts are called)

I've modified my login script to show where the scripts would run that would map the printers, but I have some special needs for Site 2 that I'm not sure how to implement using these scripts. Here is what I need:

-For the computers in the front office of the first floor, connect only the one printer in that office
-For the computers in the back office of the first floor, connect only the one printer in that office
-For the computers on the second floor:
     -for the computers near computer 0014, connect to the local printer connected to that computer
     -for the computers in bob's office, connect to the printers in that office
     -for the computers in the back office, connect to the printers in that office
     -for all the computers on the 2nd floor, connect to the two general use network printers (in addition to the other printers they are already connected to)
-Connect the two general use network printers to all computers that don't match any of the other groups (laptops that move from site to site are my target here)

I hope this is not too confusing or convoluted. If this is too much to handle here, just let me know and I'll try to find the answer else where.

Thank you for any help you can provide.
Daniel

@echo off

net use /persistent:no

IfMember.exe "OU1 Admins"
if Not Errorlevel 1 GOTO DoneOU1TAdmins

net use x: /delete
net use y: /delete
net use z: /delete

net use x: \\ou1-fs\d$
net use y: \\ou2-fs\d$
net use z: \\io\e$

echo %computername%,%username%,%date%,%time%,%ipadd%,%location%,%LOGONSERVER% >>"Z:\logs\computers\%computername%.csv"
echo %computername%,%username%,%date%,%time%,%ipadd%,%location%,%LOGONSERVER% >>"Z:\logs\users\%username%.csv"
:DoneOU1Admins

IfMember.exe "OU2 Admins"
if Not Errorlevel 1 GOTO DoneOU2Admins

net use y: /delete
net use z: /delete

net use y: \\ou2-fs\d$
net use z: \\appserver\e$

echo %computername%,%username%,%date%,%time%,%ipadd%,%location%,%LOGONSERVER% >>"Z:\logs\computers\%computername%.csv"
echo %computername%,%username%,%date%,%time%,%ipadd%,%location%,%LOGONSERVER% >>"Z:\logs\users\%username%.csv"
:DoneOU2Admins


REM **** Map public directory for OU4

IfMember.exe "OU4 Users"
if Not Errorlevel 1 GOTO DoneOU4Users
net use g: /delete
net use g: \\ou4-fs\public
:DoneOU4Users


REM **** Map public directory based on primary user group membership

net use p: /delete

IfMember.exe "OU1 Users"
if Errorlevel 1 net use p: \\ou1-fs\public

IfMember.exe "OU2 Users"
if Errorlevel 1 net use p: \\ou2-fs\public

IfMember.exe "OU3 Users"
if Errorlevel 1 net use p: \\ou3-fs\public

IfMember.exe "OU5 Users"
if Errorlevel 1 net use p: \\ou5-fs\public

IfMember.exe "OU6 Users"
if Errorlevel 1 net use p: \\ou6-fs\public


REM **** Map shared folder on ou2-fs if needed

IfMember.exe "OU2 Shared"
if Not Errorlevel 1 GOTO doneOU2Shared
net use s: /delete
net use s: \\ou2-fs\shared
:doneOU2Shared




REM **** use IP address to determine location

for /F "tokens=2 delims=:" %%K in ('ipconfig ^| find /I "IP Address"') do set IPADD=%%K
REM Site 1 subnet is 10.10.101.0/24
IF /I %IPADD% LSS 10.10.101 GOTO invalid ELSE
IF /I %IPADD% LSS 10.10.101.9 GOTO Site1 ELSE
REM Site 3 subnet is 10.10.115.0/24
IF /I %IPADD% LSS 10.10.115 GOTO invalid ELSE
IF /I %IPADD% LSS 10.10.115.9 GOTO Site3 ELSE
REM Site 5 subnet is 10.10.27.0/24
IF /I %IPADD% LSS 10.10.27 GOTO invalid ELSE
IF /I %IPADD% LSS 10.10.27.9 GOTO Site5 ELSE
REM Site 2 subnet is 10.12.0.0/16
IF /I %IPADD% LSS 10.12 GOTO invalid ELSE
IF /I %IPADD% LSS 10.12.9 GOTO Site2 ELSE
REM Site 3 subnet is 192.168.69.0/24
IF /I %IPADD% LSS 192.168.69 GOTO invalid ELSE
IF /I %IPADD% LSS 192.168.69.9 GOTO Site3 ELSE
GOTO invalid


REM **** Setup printers based on location of PC

:Site1
set LOCATION=Site1

REM connect pam's locally shared printer to computers in that office
cscript connect_ou1_printers_pam.vbs
REM connect all network printers at site 1
cscript connect_ou1_printers.vbs

GOTO FinishLocation

:Site3
set LOCATION=Site3

REM connect printer connected to pc 0004 to computers in that office
cscript connect_ou3_printers_0004.vbs
REM connect all network printers at site 3
cscript connect_ou3_printers.vbs

GOTO FinishLocation

:Site6
set LOCATION=Site6
GOTO FinishLocation

:Site4
set LOCATION=Site4
REM connect all network printers at site 4
cscript connect_ou4_printers.vbs
GOTO FinishLocation

:Site2
set LOCATION=Site2

REM connect only the printer in the front office (don't run other scripts)
cscript connect_site2_printers_1st_front.vbs
REM connect only the printer in the back office (don't run other scripts)
cscript connect_site2_printers_1st_back.vbs
REM connect printer connected to computer 0014 to computers in that office
cscript connect_site2_printers_2nd_0014.vbs
REM connect printers in bob's office to computers in that office
cscript connect_site2_printers_2nd_bob.vbs
REM connect printers in the back office to computers in that office
cscript connect_site2_printers_2nd_back.vbs
REM connect general use printers to all computer on the 2nd floor
cscript connect_site2_printers_2nd.vbs

GOTO FinishLocation

:invalid
REM **** Not logged in at one of our sites.
set Location=Unknown
GOTO FinishLocation

:FinishLocation

:Done

One other thing I forgot about is that I need to use a logoff script to disconnect any printers that were connected during logon. I can't just disconnect all network printers because some people use their laptops at other sites and I don't want to disconnect any printers they have setup manually.

I know how to disconnect the printers, I just don't know the best way to only disconnect the printers that I connected.

Thanks
Daniel

You could set this information into an environment variable and then read it when you run the logoff script.  Or you could write it to a text file.

I'm going to have to go through the batch file a couple of times in order to answer your other question.

Writing the printers to a text file was what I thought of doing. I figured that as each printer is connected in the login script, that printer name is written to a text file on the computer and then the logoff script just reads each of the printers from that text file and removes the printer and then deletes the text file.

Thanks again for all your time and effort on this. I really appreciate the help.
Daniel

Sure, Daniel.  Glad I was able to help out.

BlueDevilFan:

Did you have a chance to look over my script to see if it was possible to change it all over to a vbs script rather than a batch file? The main part that I'm not sure how to do and haven't really been able to find an example of is  the part that determines the site by the IP address. Also, how would I about writing the printers that get connected to a text file so that I can read that text file during logoff?

Thanks again for the help.
Daniel

Daniel,

No, not yet.  I wasn't thinking that you wanted to convert the whole batch file, I was thinking you just wanted to know where best to put the script I posted.  Actually, I believe that converting the whole script sounds easier.  I'll try and get to this tomorrow, though it may well be tomorrow evening.  

You can write the printer information to a file like this:

Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile("C:\PrinterInfo.Txt")
.
.
objNetwork.AddPrinterConnection "\\Server\PrinterName"
objFile.WriteLine "\\Server\PrinerName"
.
.
objFile.Close
Set objFile = Nothing
Set objFSO = Nothing

Then when you're ready to disconnect them, you use this:

Set objNetwork = CreateObject("Wscript.Network")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.OpenTextFile("C:\PrinterInfo.Txt")
While Not objFile.AtEndOfStream()
    objNetwork.RemovePrinterConnection objFile.ReadLine
Wend
objFile.Close
Set objFile = Nothing
objFSO.DeleteFile "C:\PrinterInfo.Txt"
Set objFSO = Nothing

Daniel,

Here's your batch file converted to a script.  I couldn't test the entire script easily since my environment is so much different than yours.  I'm pretty confident it will work, but there might be a few syntax errors or typos.


'Script Begins Here
Const ForAppending = 8

Set objShell = Wscript.CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objNetwork = CreateObject("Wscript.Network")
strComputerName = objNetwork.ComputerName
strUserName = objNetwork.UserName
strDomain = objNetwork.UserDomain
If IsGroupMember(strDomain, "OU1 Admins") Then
    objNetwork.RemoveNetworkDrive "x:", True
    objNetwork.RemoveNetworkDrive "y:", True
    objNetwork.RemoveNetworkDrive "z:", True
    objNetwork.MapNetworkDrive "x:", "\\ou1-fs\d$"
    objNetwork.MapNetworkDrive "x:", "\\ou2-fs\d$"
    objNetwork.MapNetworkDrive "x:", "\\io\e$"
    WriteLogRecords
End If
If IsGroupMember(strDomain, "OU2 Admins") Then
    objNetwork.RemoveNetworkDrive "y:", True
    objNetwork.RemoveNetworkDrive "z:", True    
    objNetwork.MapNetworkDrive "y:", "\\ou2-fs\d$"
    objNetwork.MapNetworkDrive "z:", "\\appserver\e$"
    WriteLogRecords
End If
'**** Map public directory for OU4
If IsGroupMember(strDomain, "OU4 Users" Then
    objNetwork.RemoveNetworkDrive "g:", True
    objNetwork.MapNetworkDrive "g:", "\\ou2-fs\public"
End If
'**** Map public directory based on primary user group membership
objNetwork.RemoveNetworkDrive "p:", True
If IsGroupMember(strDomain, "OU1 Users") Then
    objNetwork.MapNetworkDrive "p:", "\\ou1-fs\public"
End If
If IsGroupMember(strDomain, "OU2 Users") Then
    objNetwork.MapNetworkDrive "p:", "\\ou2-fs\public"
End If
If IsGroupMember(strDomain, "OU3 Users") Then
    objNetwork.MapNetworkDrive "p:", "\\ou3-fs\public"
End If
If IsGroupMember(strDomain, "OU5 Users") Then
    objNetwork.MapNetworkDrive "p:", "\\ou5-fs\public"
End If
If IsGroupMember(strDomain, "OU6 Users") Then
    objNetwork.MapNetworkDrive "p:", "\\ou6-fs\public"
End If
'**** Map shared folder on ou2-fs if needed
If IsGroupMember(strDomain, "OU2 Shared") Then
    objNetwork.RemoveNetworkDrive "s:", True
    objNetwork.MapNetworkDrive "p:", "\\ou2-fs\shared"
End If
strIPAddr = objShell.Environment("SYSTEM").Item("IPAddr")
arrIPOctets = Split(strIPAddr)
If arrIPOctets(0) = "10" Then
    If arrIPOctets(1) = "10" Then
        If arrIPOctets(2) = "101" Then
            If CInt(arrIPOctets(3)) >= 0 And CInt(arrIPOctets(3)) <= 24 Then
                'This PC is in Site 1
                objShell.Environment("SYSTEM").Item("Site") = "1"
            End If
        ElseIf arrIPOctets = "115" Then
            If CInt(arrIPOctets(3)) >= 0 And CInt(arrIPOctets(3)) <= 24 Then
                'This PC is in Site 3
                objShell.Environment("SYSTEM").Item("Site") = "3"
            End If
        ElseIf arrIPOctets = "27" Then
            If CInt(arrIPOctets(3)) >= 0 And CInt(arrIPOctets(3)) <= 24 Then
                'This PC is in Site 5
                objShell.Environment("SYSTEM").Item("Site") = "5"
            End If
        End If
    ElseIf arrIPOctets(1) = "12" Then
        If arrIPOctets(2) = "0" Then
            If CInt(arrIPOctets(3)) >= 0 And CInt(arrIPOctets(3)) <= 16 Then
                'This PC is in Site 2
                objShell.Environment("SYSTEM").Item("Site") = "2"
            End If
        End If
    End If
ElseIf arrIPOctets(0) = "192" Then
    If arrIPOctets(1) = "168" Then
        If arrIPOctets(2) = "69" Then
            If CInt(arrIPOctets(3)) >= 0 And CInt(arrIPOctets(3)) <= 24 Then
                'This PC is in Site 3
                objShell.Environment("SYSTEM").Item("Site") = "3"
            End If
        End If
    End If
End If
Set objShell = Nothing
Set objNetwork = Nothing
Set objFSO = Nothing
Wscript.Quit

Function IsGroupMember(strDomain, strGroup)
    Dim objGroup
    Set objGroup = GetObject("WinNT://" & strDomain & "/" & strGroup & ",group")
    If objGroup.IsMember(objComputer.ADsPath) Then
        IsGroupMember = True
    Else
        IsGroupMember = False
    End If
    Set objGroup = Nothing
End Function

Sub WriteLogRecords()
    Set objLogFile1 = objFSO.OpenTextFile("z:\logs\computers\" & strComputerName & ".csv", ForAppending)
    Set objLogFile2 = objFSO.OpenTextFile("z:\logs\users\" & strUserName & ".csv", ForAppending)
    strMessage = strComputerName & "," & strUserName & "," & Date & "," & Time & "," & _
        objShell.Environment("SYSTEM").Item("IPAddr") & "," & _
        objShell.Environment("SYSTEM").Item("Location")  & "," & _
        objShell.Environment("SYSTEM").Item("LogonServer")
    objLogfile1.WriteLine strMessage
    objLogfile2.WriteLine strMessage
    objLogFile1.Close
    objLogFile2.Close
    Set objLogFile1 = Nothing
    Set objLogFile2 = Nothing
End Sub

Thank you so much. I'll try it out in the next few days and let you know.

I apprecaite all the time you've put into this for me.

BlueDevilFan,

I finally got a chance to take a look at what you posted for me. I got everything working up until the section that determines the site based on the IP address.  I got an out of range error on the split command. When I did an echo of the strIPAddr variable, it was empty.

From what I can tell, his line assigns the IP to the variable:
       strIPAddr = objShell.Environment("SYSTEM").Item("IPAddr")

I seached google to find something referring to the IPAddr environment variable that this line appears to be referencing and I couldn't find anything so I'm not sure how this line works. I was able to find another script that would get the IP address from ipconfig and could incorporate that into this script, but if there is a better way, that would be nice.

If you could clarify this for me, I'd appreciate it.

Thanks,
Daniel

Hi, Daniel.

Sorry, I must've gotten questions confused or I was cutting and pasting from code snippets and didn't paste in everything.  There are two ways I know of to get the IP Address.  The first way is the one you found when you searched Google.  Using it you use the wscript.shell object to shell out and run the IPConfig command, echoing the output to a file.  You then open the resulting file and search it for the line that begins with "IP Address".  Read everything to the right of the colon and you have the IP address.  The other way uses WMI (Windows Management Instrumentation).  The code for that looks something like this:

strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_NetworkAdapterConfiguration Where IPEnabled = True", , 48)
For Each objItem In colItems
    strIPAddr = objItem.IPAddress(0)
    If strIPAddr <> "0.0.0.0" Then
        Exit For
    End If
Next

Both approaches suffer from a flaw though.  If the computer in question happens to have two, or more, IP addresses, then you'll get one, but perhaps not the right one.  The only definitive way around that is to know the exact name of the NIC whose IP address you want and modify the command to get the IP for just that one NIC.

Hi BlueDevilFan,

OK, I've got the script in place and I'm pretty sure it's working pretty well now. I had to make a few changes, but it was a good excercise for me to figure out how it all worked.

Thanks again for all the help on this.

Daniel

Cool.  Glad I was able to help out.  This was an interesting question.