?
Solved

Group Policy, push out a Batch file

Posted on 2007-04-09
11
Medium Priority
?
2,100 Views
Last Modified: 2008-09-18
I am running Windows Server 2003 (SP1) and it is the DC.  I am also new to Active Directory and setting up Group Policys.  I have a program that I would like to install on all the PCs on the network and have a batch fie setup to run the install, it has been tested and runs fine.  (I tried doing a MSI and found the batch file is the easiest way due to how the program's install is setup.)  This batch file only needs to run one time   I haven't found instructions that I am 100% confident in on how to use Group Policy to deploy this batch file.  Can someone give me step by step instructions on how to do this?  Or is there another way I should be doing this?
0
Comment
Question by:lunchbyte
  • 6
  • 5
11 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 18875583
Setup your batch file like this:

@echo off
If exist c:\Program.flg goto :eof
::your code to call the install
echo Installed > c:\Program.flg

The first time it's called, it'll skip over the first line (excluding the @echo off) - and will call your install routine.
Then, it'll write a flag file to the root of c: - the next time it runs, it'll check for that flag file before proceeding - if it exists, it'll just exit the script.
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18875858
Thanks for the code to add the flag file. Very helpful.  Just need the instructions on adding it to Group Policy and I'm set.  Thanks again.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18875877
Right-click your domain, choose properties.
You'll want to click Edit there
The scripts are located under User Configuration, Windows Settings, Scripts, Logon Scripts...drop a reference to your batch file there.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 5

Author Comment

by:lunchbyte
ID: 18876071
I guess this is where I'm getting tripped up.  When I right click on my domain in Group Policy Management then properties I have two tabs, General & Manage by.  I do not have an option to click on Edit under either tab.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18876088
Open up Active Directory Users & Computers (Start->Run->Dsa.msc if you have the admin tools installed or are on a DC).
Now, right-click your domain, and choose properties
Under the Group Policy tab, do you have any GPOs listed?
You can choose to edit one there, or edit the default domain policy...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18876332
Under Active Directory User & computers when I get to the Group Policy tab it says the Group Policy snap-in has been installed, so the tab is no longer used.  From there I have the open button which opens Group Policy Management.

By the way, I'll max out the points on this.  Thanks for the help.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18876394
Hmm - I'm not really sure on that...I'm not the group policy-guru 'round here...perhaps another expert will be able to guide you on that.  I've always used Aduc when modifying my polices...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18877175
I think I found it, is the window I need to be in called Group Policy Object Editor?  If it is, all I did was right click on 'my default policy' and clicked on edit.  From there I found what you posted in your second comment.

This seem obvious but, if I want the script to run on each computer I would put it under computer configuration, correct?  What I'm installing is a software inventory program and want to know what is on each system and really doesn't matter who the user is.
0
 
LVL 67

Accepted Solution

by:
sirbounty earned 2000 total points
ID: 18877186
Depends...computer config runs outside of the user's contect - useful for when your users won't have rights to install software...(known as 'startup' scripts) - otherwise, logon scripts are under user config...
0
 
LVL 5

Author Comment

by:lunchbyte
ID: 18877915
Thanks a ton for the help.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18877928
Glad I could assist you.  Thanx for the grade! :^)
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question