logon script won't run with group policy enabled

[derf238]

Local Group policy on Win2k3 Terminal Server has "run only allowed windows applications" enabled. With this enabled the user logon script as assigned in their AD profile will not run. The company has over 100 Terminal Servers and dozens of logon scripts and adding all of the scripts to the allowed apps would be an issue. The GPO will not accept wildcards (*). Any ideas on solutions appreciated.
Thanks in advance

 

[markdmac]

Apply the scripts via Group Policy rather than via the user properties. The domain based GPO should process before the local policy and thus allow the scripts to run.

Specifying a login script in the user properties is just there for backward compatability. The new method is to specify via GPO.

I hope you find this post helpful.

Regards,

Mark