Win2k3 TS logon script

[derf238]

Back in the day with an NT4 Terminal server I could create a logon script that would run for all users on the terminal server and only on the TS by putting it into the system32 directory and setting it in the registry. That capability appears to no longer exist. That registry key doesn't even exist. I could move the TS out of the computers folder in AD and put it in an OU, but if I had multiple TS's needing different scripts, I'd have an OU for each. Any alternatives?
Thanks

 

[mwiner]

Make a Terminal Server OU and put all your TS's in there. Then create a GPO to run a logon script. Set the permissions of the logon script to only apply to only the machines or better yet (groups of machines) for that particular logon script. Then just create a new GPO for a different logon script and set thoes permissions.

That should work great.

It's what we do.

-matt

 

[mwiner]

oooo... and another thing to look at. Let's say you have GPO's that are applied to your users but when they login to your TS you want a completely different of GPO. Well you can turn on Loopback Policy. Which means that you can apply a GPO to you Terminal Servers both computer and user policies and these policies will either replace or merge with their current policy.

Just a side note - the loopback policy is not just for terminal servers, but as for now the only way I have ever used it.

More info on loopback:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;231287