Home / server / Questions / 1013215
In Process
Hawke
Asked: 2020-04-21 06:06:53 +0800 CST

Logon script on some computers only

  • 772

I have an application that is installed only on computers in one OU. The program requires some special config/permissions added to the user profile, so I wrote a Powershell script to setup the currently logged in user.

I assume a 'startup' script wont work because it needs to run as the currently logged on user, so I was going to use a User GPO. What is the easiest way to limit the User Logon Script GPO to run only on the machines in that OU?

group-policy

2 Answers

  1. I would create a Computer GPO, linked to the OU containing the machines, that copies the powershell script here: C:\ProgramData\Start Menu\Programs\Startup.

    You can use this Preference to copy the file: Computer Configuration -> Preferences -> Windows Settings -> Files

    • 1

  2. Configure your logon script in the GPO. Then use Group Policy loopback processing in merge mode in the GPO. This will tell Group Policy to apply the users normal GPO settings as well as the user settings in this GPO only when they log into a computer in scope of this GPO.

    • 0