• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 213
  • Last Modified:

Log off script local and domain

If I have a log off script configured in teh local policy and another in GPO in the domain, will both be run or one will win and take precedence over the other?

Thanks
0
quippee
Asked:
quippee
  • 2
  • 2
  • 2
1 Solution
 
Jay_Jay70Commented:
they will both run i beleive, but i am not certain on how it will go :) however, any other settings in the the GPO will override the local policy

maybe its worth putting the script in the startup folder rather than the local policy?
0
 
quippeeAuthor Commented:
Its only 5 people and I dont like making too many GPO policies, Does it make a difference if I have too many Policies? I have about 120 users with 2 domain controllers and 4 current policies.
0
 
Jay_Jay70Commented:
There is no problem having policies split for situations like this, my advice would be to put them in a separate OU
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
Netman66Commented:
The application of policy goes like so:

Local
Site
Domain
OU, OU, OU, etc (with the closest GPO to the client applying last).

Now, you CAN change this in GPMC, however it's not normally necessary to alter the default behaviour if you have designed things properly.

What are you attempting to do?  Each User can run a different logon script that is called from their Account properties in AD - AND - a GPO at the domain level could run and do things common to all users.  This would layer things properly.
0
 
quippeeAuthor Commented:
I need to run a log off scripts that sends some files to the server.
If I move the users to their own OU that would throw things off a lil bit, I have each dept on their perspective OU with GPO attached to them.
That why I was thinking of just adding the log off script localy. (these users are from different dept and not all users in the dept need the script)
What you do think?
0
 
Netman66Commented:
OK, wasn't aware it was a logoff script.

You may want to consider using IFMEMBER.exe in your script to check for group membership then copy files accordingly (using the results of IFMEMBER).

Here's something to read on this utility:

<http://www.microsoft.com/technet/archive/winntas/tips/winntmag/grlogon.mspx?mfr=true>

Here's the download:

<http://www.microsoft.com/downloads/details.aspx?FamilyID=07c2f6d7-815e-4fa0-9043-4e4635ccd417&displaylang=en>
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

  • 2
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now