Solved

GPO to copy screen saver to %systemroot%\system32

Posted on 2011-02-16
3
2,124 Views
Last Modified: 2012-05-11
Hi,

I have created a GPO to copy a screen saver scr file from the domain netlogon to the %systemroot%\system32 directory.

The bat file below is in the Logon scripts section of the policy;

@echo off
IF NOT EXIST "%systemroot%\System32\screensaver.scr" (GOTO COPYSCR) ELSE (exit)

:COPYSCR
copy \\domain.root.com\netlogon\screensaver.scr %systemroot%\System32
exit

The policy also enables this screen saver and various timeout settings.

However, when users execute the GPO it fails with access denied as they don't have rights to the %systemroot%\system32. The bat file worked as an administrator.

Anybody know a way around this?? I don't have a directory on the clients that users have access to other than thier profile. As we have many different OS versions, this will differ.

Thanks for any help.
0
Comment
Question by:ncomper
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
ChuckDeezel earned 500 total points
ID: 34907588
Have it go to the All Users profile instead. Or maybe have it go to common files? (%COMFILESDIR%)

It looks like you will need to change the location, as elevating privs is out of the question.
0
 
LVL 27

Expert Comment

by:Lukasz Chmielewski
ID: 34908324
There is a GPO setting for the screensaver if that's what you want
(if you use other then default accesible)
in
user configuration, administrative templates, desktop, display
0
 
LVL 5

Author Closing Comment

by:ncomper
ID: 35010583
Thanks
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question