Announcement

Collapse
No announcement yet.

apply system policies to specific computer(s)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • apply system policies to specific computer(s)

    Hello,
    I'm trying to apply system policy to specific computers (Win XP Pro) which I put in separate OU (actually they need to be connected to specific printer). Domain is Win2K.
    I did define script that suppoused to run it, but unfortunately it doesn't work. Where am I wrong?

  • #2
    Does the GPO apply and only the script fails or both ?
    What is the script trying to do ? (source code can help)
    Guy Teverovsky
    "Smith & Wesson - the original point and click interface"

    Comment


    • #3
      supported what u can use:

      PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        1. The script is .bat file consists of the string
        rundll32 printui.dll,PrintUIEntry /y /n "printer name"
        which suppoused to define default printer.
        2. The GPO does apply to computers (automatic updates, for instance).

        Comment


        • #5
          network printers and defaulting to specific printer is user specific. Apply the GPO to the users and not computers.
          Guy Teverovsky
          "Smith & Wesson - the original point and click interface"

          Comment


          • #6
            So, I guess, there is no way to apply default printer to computer. In this case, is there any way to check whether computer is in certain contaner with a help of "regular" tools like command prompt ?

            Comment


            • #7
              You will have to script it.
              One way of doing it would be grabbing ADFIND utility from http://www.joeware.net/win32/zips/Adfind.zip which you can use in your script to get the computer's OU.
              Something like:
              Code:
              c:\>adfind -b dc=antid0t,dc=net -f "&(objectcategory=computer)(cn=%COMPUTERNAME%)" -dn
              This will return the full DN of the object in AD, in my case:
              Code:
              dn:CN=KANT,OU=W2K,OU=Clients,DC=antid0t,DC=net
              The output can be easily parsed using vbscript or perl.
              Guy Teverovsky
              "Smith & Wesson - the original point and click interface"

              Comment


              • #8
                Thanks, Antid0t!
                It's nice utility. Though, it took awhile since I didn't have time to deal with this, but finaly, in last two days I figured out the way to work with it. It works just fine for me. If anybody needs more information I'll gladly share.
                Thanks again.

                Comment

                Working...
                X