Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Windows 2000 Server Groups

Posted on 2003-03-26
Medium Priority
Last Modified: 2010-04-13
I have a over 3000 users running computers of various speeds.  I need to have a batch file for only 20-30 users.  I have these users in a group but i don't know how to make that batch file only run for that group (in addition to the script that runs for ALL users).

this is urgent.

Question by:earthbond
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2

Expert Comment

ID: 8213155
What environment are you in?
Are you using Kix for your scripting?

LVL 85

Accepted Solution

oBdA earned 900 total points
ID: 8213939
"ifmember.exe" from the Resource Kit is your friend:
Assuming this is your logon script, copy ifmember.exe to your netlogon directory and put something like that that in your general script:

ifmember.exe YourSpecialGroup
if not errorlevel 1 goto NoSpecial
call YourSpecialBatchFile.cmd


Author Comment

ID: 8215561
Some of the machines are only used to keep the furniture from floating away and many of the others ought to be given to musuems.  Still its what we have and I do not want to at more lines to my batch file if possible.  (Except of course if your one of those 20-30 users--and for them I would like to have an entirely seperate batch file... so that in the future the original "main" login script can be edited freely.)  I am using Windows 2000 Server and i have not idea what Kix is and since I am not the OverLord of this domain I will not be able to download more software (unless ABSOLUTLY neccessary)...  Basically what I am asking for is a way to do this per this group at the server level.  I am getting through browsing this site many suggestions on group policies but I don't know anything about them or how to set them up (although I do have the groups set up)..
LVL 85

Expert Comment

ID: 8218527
Actually, I don't quite see your problem.
If I understand you correctly, you have a common logon script for all users, and you have an additional logon script for only a certain group of users.
If you want both scripts to run for this group, there is no other way than to call one script from the other.
So basically you have two options:
1. All users have the same logon script, and if the user logging on is member of the group, the other script is called from within the common script.
2. You change the logon script for members of the special group to be the special script, and then you call the common script from within your special script.

To avoid confusion, the first solution is definitely the better one.
Assuming your common script is a batch script, all you have to do is adding the lines above at the appropriate position (probably rather at the end of it).

Group policies don't offer any additional capabilities for logon scripts that seem to be really useful in your case. Especially if you don't have experience with them, I'd recommand reading up on them and testing their results before actually implementing them (especially since, given your hardware description, probably not all of your clients are running W2k/XP).

It might be useful if you clue us in a bit more about your surroundings.

Author Comment

ID: 8227274
I will give you the points oBdA but actually I figured it out.  If you create an OU group (Orginizational Unit/Group)(we'll call this first one GROUPM) in which to put your main bulk of users.  Then create an OU group inside GROUPM (we'll call it SPECIALGROUP).  Then when you right click on the GROUPM icon-go to the third tab- and add a policy.  in that policy you can specifiy a logon/logoff script and many other options for the members in the OU group.  You can then create a seperate policy for SPECIALGROUP (which is a sub OU group of GROUPM).  If you specifiy a logon script for both the main OU group and sub OU group they well run heirarchically (however you spell it).  Meaning that the logon script (and the other policy settings) for GROUPM will run first then the logon script for the sub group SPECIALGROUP will run next (and the policies (this time from SPECIALGROUP) will be reapplied [i don't know which would win in a conflict-never tried it]).  NONE of that is visible (nor will a pause statement allow the cmd dialog to remain after windows finishes logging on).  After all of that then will the indiviual's logon script (if specified) will be run (visibly).  Any way I spent all day and thats what I come up with.  Just in case anyone else runs into this problem.  NOTE: no policiy but the main domain policy can be applied to an OU group.

Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : All lightning effects with instructions : http://www.mediaf…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question