Microsoft KB Archive/285206

= SMS: How to Use Smsls.bat Logon Script with an Organizational Unit =

PSS ID Number: 285206

Article Last Modified on 11/21/2002

-

The information in this article applies to:


 * Microsoft Systems Management Server 2.0 SP2
 * Microsoft Systems Management Server 2.0 SP3

-



This article was previously published under Q285206



SUMMARY
If you are an administrator, you can use Group Policy settings to manage desktop configurations for groups of computers and users. You can specify policy settings for the following items:
 * Registry-based policy settings
 * Security
 * Software installation
 * Scripts
 * Folder redirection
 * Remote-based services
 * Microsoft Internet Explorer maintenance

Startup and shutdown scripts apply to specified Microsoft Windows 2000-based computers. Logon and logoff scripts apply to specified users.



MORE INFORMATION
In Microsoft Windows NT 4.0 and Microsoft Windows 2000 environments, if you configure either the Windows Networking Logon Client installation or the Windows Networking Logon Discovery method, Systems Management Server (SMS) creates an Smslogon share, and then copies Smsls.bat and the required files to the Netlogon share on domain controllers. SMS also adds Smsls.bat to each user's account profile by using the Modify Logon Script on the Windows Networking Logon Client installation or the Windows Networking Logon Discovery method. This configuration is a domain-wide configuration that installs SMS client components.

In Windows 2000, if a client computer is running either Windows 2000 or Microsoft Windows XP, you can use Group Policy to apply Smsls.bat to selected Active Directory service system containers (sites, domains and organizational units). If you associate a Group Policy object (GPO) with organizational units, you can apply Smsls.bat to a user who is the member of that organizational unit.

The following procedure describes how to configure SMS Group Policy settings so that an organizational unit runs Smsls.bat when a user logs on:  Start the SMS Administrator console. Click either Client Installation Methods or Discovery Methods under Site settings. Click either Windows Networking Logon Client installation or Windows Networking Logon Discovery method. Enable either Windows Networking Logon Client Installation or Windows Networking Logon Discovery method. Start the Active Directory Users and Computers snap-in. Click an organizational unit that is associated with the GPO you want to configure. Move users to this organizational unit.</li> Click the organizational unit, click Action, and then click Properties.</li> Click the Group Policy tab.</li> If you do not already have a GPO, click New, and then type a name for the new GPO.

When you create a new GPO, the Group Policy Template (GPT) is created. The following items are stored in the GPT:

<ul> Security settings</li> Administrative Template-based policy settings</li> Programs that are available for software installation</li> Script files</li></ul>

The GPT folder is located in the following location, where  is the globally unique identifier of the GPO:

%SystemRoot%\Sysvol\Sysvol\ .com\Policies\

</li> Click Edit.</li> Expand User Configuration, and then expand Windows Settings.

After you expand Windows Settings, Scripts, Logon and Logoff folders are created at the following location:

%SystemRoot%\Sysvol\Sysvol\ \Policies\ \Users\Scripts

</li> Open Windows Explorer, and then locate the following files on the %SystemRoot%\Sysvol\Sysvol\ \Scripts Netlogon share: <ul> Slwnt16.exe</li> Slwnt32.exe</li> Slwnt32a.exe</li> Smsboot1.exe</li> Smsls.bat</li> <li>Snboot.exe</li></ul>

</li> <li>Paste these files to the following location:

%SystemRoot%\Sysvol\Sysvol\ \Policies\ \Users\Scripts\Logon

To find the GUID, click the organizational unit that you created the GPO for in Active Directory Users and Computers, right-click the GPO, and then click Properties.</li> <li>In Active Directory Users and Computers, click the organizational unit that you created the GPO for, click the GPO, expand User configurations, expand Windows Settings, and then click Scripts(Logon/Logoff).</li> <li>In the right pane, double-click Logon.</li> <li>Click Add, and then click Browse.</li> <li>Add the Smsls.bat file.</li> <li>Close the Group Policy dialog box.</li> <li>If you have muiltple domain controllers, make sure that this group policy replicates to all domain controllers.</li></ol>

After you perform this procedure, Smsls.bat is applied only to users who are members of this organizational unit.

Additional query words: prodsms smsls OU

Keywords: kbClient kbinfo kbnetwork KB285206

Technology: kbSMS200SP2 kbSMS200SP3 kbSMSSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2003 Microsoft Corporation. All rights reserved.