We help IT Professionals succeed at work.

Log off script local and domain

quippee
quippee asked
on
Medium Priority
225 Views
Last Modified: 2010-04-18
If I have a log off script configured in teh local policy and another in GPO in the domain, will both be run or one will win and take precedence over the other?

Thanks
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2006

Commented:
they will both run i beleive, but i am not certain on how it will go :) however, any other settings in the the GPO will override the local policy

maybe its worth putting the script in the startup folder rather than the local policy?

Author

Commented:
Its only 5 people and I dont like making too many GPO policies, Does it make a difference if I have too many Policies? I have about 120 users with 2 domain controllers and 4 current policies.
CERTIFIED EXPERT
Top Expert 2006

Commented:
There is no problem having policies split for situations like this, my advice would be to put them in a separate OU
CERTIFIED EXPERT
Top Expert 2005

Commented:
The application of policy goes like so:

Local
Site
Domain
OU, OU, OU, etc (with the closest GPO to the client applying last).

Now, you CAN change this in GPMC, however it's not normally necessary to alter the default behaviour if you have designed things properly.

What are you attempting to do?  Each User can run a different logon script that is called from their Account properties in AD - AND - a GPO at the domain level could run and do things common to all users.  This would layer things properly.

Author

Commented:
I need to run a log off scripts that sends some files to the server.
If I move the users to their own OU that would throw things off a lil bit, I have each dept on their perspective OU with GPO attached to them.
That why I was thinking of just adding the log off script localy. (these users are from different dept and not all users in the dept need the script)
What you do think?
CERTIFIED EXPERT
Top Expert 2005
Commented:
OK, wasn't aware it was a logoff script.

You may want to consider using IFMEMBER.exe in your script to check for group membership then copy files accordingly (using the results of IFMEMBER).

Here's something to read on this utility:

<http://www.microsoft.com/technet/archive/winntas/tips/winntmag/grlogon.mspx?mfr=true>

Here's the download:

<http://www.microsoft.com/downloads/details.aspx?FamilyID=07c2f6d7-815e-4fa0-9043-4e4635ccd417&displaylang=en>

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.