Windows GPO Scripts

[krhall]

Has anyone ever written a windows GPO script to run before a logon box appears?

I am thinking of doing something to enforce our Computer user policy.

As ever any help appreciated.

[fizzwheel]

What exactly do you want to do with the script ?

We call a VBS Script that we use to do the drive mappings and some other stuff, but for enforcing the user policies, locking down desktops etc etc, we just use group policy itself.

[krhall]

Basically we have an acceptable usage policy in place which users are supposed to sign to say they've read it and understood, but they seldomly do and HR won't allow us to enforce the fact that if you don't sign you don't access the system. So I want a message to pop up pre-logon with a version of the policy, to which there is only one option TO ACCEPT, once they've done this they egt a CTRL-ALT-DEL login box.

[fizzwheel]

So I want a message to pop up pre-logon with a version of the policy, to which there is only one option TO ACCEPT, once they've done this they egt a CTRL-ALT-DEL login box.

I'm pretty confident that theres already a function in AD or Group Policy itself to do that you shouldnt need to write a script.

have a google for it, its called a pre-login box or something like that I'll see if I can find it.

[fizzwheel]

Here you go, have a scroll down through this document

http://www.microsoft.com/technet/security/prodtech/windows2000/w2kccadm/localpol/w2kadm13.mspx

Look for the section titled :

"Implementing an Authorized Usage Warning"

[krhall]

Thanks for that Fizzwheel - I was just in the middle of trying to write a VBScript. Which I had actually managed all except for greying out the cross in the corner. A proper GPO is much better.