A Windows Vista forum. Vista Banter

Welcome to Vista Banter.

You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact support.

Go Back   Home » Vista Banter forum » Microsoft Windows Vista » Security and Windows Vista
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Security and Windows Vista A forum for discussion on security issues with Windows Vista. (microsoft.public.windows.vista.security)

Best Practices, Vista Logon Scripts



 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old October 12th 06, 05:36 PM posted to microsoft.public.windows.vista.security
Doug Walch
external usenet poster
 
Posts: 3
Default Best Practices, Vista Logon Scripts

I'm interested to know if there is a Best Practices White Paper with respect
to Vista Logon Scripts from Active Directory, addressing issues with UAC,
mapping drives, registry keys etc. If not, there should be! TIA


  #2 (permalink)  
Old January 5th 07, 08:35 AM posted to microsoft.public.windows.vista.security
Ridesy
external usenet poster
 
Posts: 17
Default Best Practices, Vista Logon Scripts

Doug,

Did you get anywhere with this question, as I have a similar issue of UAC
asking for approval of a simple Server 2003 logon script for every user,
everytime they logon to the network and I can't see anyway to "add the logon
script as something that doesn't need approval"??

Jeremy

"Doug Walch" wrote:

I'm interested to know if there is a Best Practices White Paper with respect
to Vista Logon Scripts from Active Directory, addressing issues with UAC,
mapping drives, registry keys etc. If not, there should be! TIA



  #3 (permalink)  
Old January 8th 07, 09:34 PM posted to microsoft.public.windows.vista.security
Gerry Hickman
external usenet poster
 
Posts: 116
Default Best Practices, Vista Logon Scripts

Hi Ridesy,

I'm interested to know if there is a Best Practices White Paper with respect
to Vista Logon Scripts from Active Directory, addressing issues with UAC,
mapping drives, registry keys etc. If not, there should be! TIA


What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)
  #4 (permalink)  
Old January 9th 07, 08:31 AM posted to microsoft.public.windows.vista.security
Ridesy
external usenet poster
 
Posts: 17
Default Best Practices, Vista Logon Scripts

Gerry,

Thanks for your two replies, but I still have the same issues:

1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
nothing else.
2. If I have an account on a PC set-up as "Standard User" the problem is
even worse with UAC, as the same pop-up arrives, but without an admin
account/password the user can only cancel the setup.exe from running.

I am currently trying to find out what the heck the setup.exe set's up, but
I am a bit stunned that this must be a standard part of certainly SBS Server
2003 configuration and it appears it is going to be an issue with any PC
running Vista attaching to the domain.

Ridesy

"Gerry Hickman" wrote:

Hi Ridesy,

I'm interested to know if there is a Best Practices White Paper with respect
to Vista Logon Scripts from Active Directory, addressing issues with UAC,
mapping drives, registry keys etc. If not, there should be! TIA


What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)

  #5 (permalink)  
Old January 9th 07, 01:50 PM posted to microsoft.public.windows.vista.security
Kerry Brown
external usenet poster
 
Posts: 2,887
Default Best Practices, Vista Logon Scripts

Microsoft should have an update for SBS out soon. The setup.exe in the SBS
logon script is where SBS checks for and installs any programs, service
packs etc. that you have setup to automatically deploy to users. Typically
SP2, Outlook and IE are setup by default. The workaround is to disable the
logon script for Vista users and manage this manually until Microsoft has
the update for SBS ready.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" wrote in message
...
Gerry,

Thanks for your two replies, but I still have the same issues:

1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
nothing else.
2. If I have an account on a PC set-up as "Standard User" the problem is
even worse with UAC, as the same pop-up arrives, but without an admin
account/password the user can only cancel the setup.exe from running.

I am currently trying to find out what the heck the setup.exe set's up,
but
I am a bit stunned that this must be a standard part of certainly SBS
Server
2003 configuration and it appears it is going to be an issue with any PC
running Vista attaching to the domain.

Ridesy

"Gerry Hickman" wrote:

Hi Ridesy,

I'm interested to know if there is a Best Practices White Paper with
respect
to Vista Logon Scripts from Active Directory, addressing issues with
UAC,
mapping drives, registry keys etc. If not, there should be! TIA


What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)


  #6 (permalink)  
Old January 9th 07, 02:05 PM posted to microsoft.public.windows.vista.security
Ridesy
external usenet poster
 
Posts: 17
Default Best Practices, Vista Logon Scripts

Kerry,

Thank you for this information, look forward to SBS update!

In the meantime will disable for Vista test PC's, any hints on how to do this?

Ridesy

"Kerry Brown" wrote:

Microsoft should have an update for SBS out soon. The setup.exe in the SBS
logon script is where SBS checks for and installs any programs, service
packs etc. that you have setup to automatically deploy to users. Typically
SP2, Outlook and IE are setup by default. The workaround is to disable the
logon script for Vista users and manage this manually until Microsoft has
the update for SBS ready.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" wrote in message
...
Gerry,

Thanks for your two replies, but I still have the same issues:

1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
nothing else.
2. If I have an account on a PC set-up as "Standard User" the problem is
even worse with UAC, as the same pop-up arrives, but without an admin
account/password the user can only cancel the setup.exe from running.

I am currently trying to find out what the heck the setup.exe set's up,
but
I am a bit stunned that this must be a standard part of certainly SBS
Server
2003 configuration and it appears it is going to be an issue with any PC
running Vista attaching to the domain.

Ridesy

"Gerry Hickman" wrote:

Hi Ridesy,

I'm interested to know if there is a Best Practices White Paper with
respect
to Vista Logon Scripts from Active Directory, addressing issues with
UAC,
mapping drives, registry keys etc. If not, there should be! TIA

What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)



  #7 (permalink)  
Old January 9th 07, 04:13 PM posted to microsoft.public.windows.vista.security
Kerry Brown
external usenet poster
 
Posts: 2,887
Default Best Practices, Vista Logon Scripts

From the user screen in the SBS Server Management console double click the
user. Click on the Profile tab and remove or change the entry for the logon
script.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" wrote in message
...
Kerry,

Thank you for this information, look forward to SBS update!

In the meantime will disable for Vista test PC's, any hints on how to do
this?

Ridesy

"Kerry Brown" wrote:

Microsoft should have an update for SBS out soon. The setup.exe in the
SBS
logon script is where SBS checks for and installs any programs, service
packs etc. that you have setup to automatically deploy to users.
Typically
SP2, Outlook and IE are setup by default. The workaround is to disable
the
logon script for Vista users and manage this manually until Microsoft has
the update for SBS ready.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" wrote in message
...
Gerry,

Thanks for your two replies, but I still have the same issues:

1. The logon script just runs SBS Server 2003 "client\setup\setup.exe"
and
nothing else.
2. If I have an account on a PC set-up as "Standard User" the problem
is
even worse with UAC, as the same pop-up arrives, but without an admin
account/password the user can only cancel the setup.exe from running.

I am currently trying to find out what the heck the setup.exe set's up,
but
I am a bit stunned that this must be a standard part of certainly SBS
Server
2003 configuration and it appears it is going to be an issue with any
PC
running Vista attaching to the domain.

Ridesy

"Gerry Hickman" wrote:

Hi Ridesy,

I'm interested to know if there is a Best Practices White Paper
with
respect
to Vista Logon Scripts from Active Directory, addressing issues
with
UAC,
mapping drives, registry keys etc. If not, there should be! TIA

What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon
script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)




 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 08:54 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.Search Engine Optimization by vBSEO 3.0.0 RC6
Copyright ©2004-2012 Vista Banter.
The comments are property of their posters.