GPO startup computer script

Posted on 2014-08-29
Last Modified: 2014-08-29
I'm having problems with a GPO computer startup script to copy a batch file to the local 'all users' startup folder. The batch file executes fine locally.

AD 2003 functional level
ServerX = Windows 2003 R2 DC Operations Master (RID, PDC, Infrastructure, schema, domain role), DNS
ServerY = Windows 2008 R2- secondary DC, DHCP server, backup DNS

I was hoping someone could give me a step-by-step for creating and testing the GPO, as I seem to be missing something.

This is the contents of the batch file:

xcopy \\ServerX\tmp\cah.bat "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\" /y

Thank you for your time.
Question by:MRH-ITS
    LVL 56

    Expert Comment

    by:Cliff Galiher
    If the batch file runs fine locally then it is likely a permissions issue. Keep in mind that startup scripts run as the local computer account, so both share and NTFS permissions need to allow that computer account read access for the file to be copied.
    LVL 37

    Expert Comment

    IF you put your cah.bat file into the NETLOGON directory on your AD controller(s) then you will more than likely solve the problem.  Then just use:-

    xcopy \\DOMAIN.NAME\NETLOGON\cah.bat "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\" /y

    Author Comment

    I've tried putting the batch file in the netlogon directory on ServerX, but to no avail.
    LVL 37

    Expert Comment

    Quick question... Why are you not using Group Policy to deploy the file directly? Its much easier.

    Have a read.

    Author Comment

    I've tried to, but it's not working for me. Also, the link you referred me to does not seem applicable to Windows server 2003. Unless I'm missing something.
    LVL 37

    Accepted Solution

    You stated you have BOTH 2003 AND 2008R2 servers in the domain.  You use the GPO Management on the 2008R2 server to configure the GP's and you can then follow that link.

    Author Closing Comment

    That did it. Thanks!

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    ntp settings vcenter 4 45
    DNS Name resolution between two untrusted forests 22 60
    Event 1008, Perflib 2 29
    How to implement SSO? 22 48
    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now