Wednesday, December 7, 2016

windows 7 - Local group policy for all users

Windows 7, 64bit.


I have two simple .bat scripts created, one which runs at logon, the other at logoff. The .bat files are located in C:\bat. Other users have access to this folder.


The contents of each .bat file are below (basically disable/enable a specific device using devcon.exe);


disable.bat


devcon disable "FTDIBUS\COMPORT&VID_0D2C&PID_032A"

enable.bat


devcon enable "FTDIBUS\COMPORT&VID_0D2C&PID_032A"

I set the group policy logon/logoff script by doing the following;



  • logged into my PC as the local administrator

  • start > run > gpedit.msc

  • user configuration > windows settings

  • scripts (Logon/Logoff)

  • added my two .bat files to Logon/Logoff respectively


The scripts do work but only when I am logged in as the local administrator (the user that created the policy). When another (non-admin) user logs on, the scripts seem to be ignored.


How can I set this up so that the scripts run for each and every user that logs on to the PC?


This PC is part on an AD domain which I have no control over.


I'm unable to run the .bat files manually when logged in as a non-admin user. Presumably this is because the .bat files are trying to disable a device in device manager. Non-admin users can't disable devices in device manager, I receive an error when trying to do that.


Any help is appreciated.

No comments:

Post a Comment

hard drive - Leaving bad sectors in unformatted partition?

Laptop was acting really weird, and copy and seek times were really slow, so I decided to scan the hard drive surface. I have a couple hundr...