Desktop Logo 1

[windowsfan]

I have a task to change desktop logon every month on 1000 PC.
what's the best way I accomplish this task? Answer definitely is GP but just want to get some feedback from experts.

Is it better to use GP or logon script?
Where do I store the logo?

 

[windowsfan]

This worked fine but now I just found out that our AD structure is not ready to configure Group Policy based on users, can we ge the same result by configuring policy based on computers.

 

[markdmac]

I just found out that our AD structure is not ready to configure Group Policy based on users

This statement makes no sense to me at all. I suspect you just don't understand how to configure this and would suggest that you purchase a good AD book or bring in a consultant who can help guide you a bit to help you get your feet wet.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

Hi Mark,
I know what I am doing. I already have a test group policy in place on testOU and is working fine but we have one OU for all users name BH-Users. We dont want same logon on each PC, we need to have different logo on each department.
I have individual workstation OU for each department so my question was is it possilbe to configure wall paper based on computer and not PC. As far as I know it's not possible but, just wanted to make sure with someone by posting question.

Thanks

 

[windowsfan]

About this statement:
I just found out that our AD structure is not ready to configure Group Policy based on users. I knew it was not ready and I was going to change it but now upper management want allow me to change the structure and that's the reaons I am looking to see if I can pushout wallpaper based on computer.

 

[markdmac]

I know what I am doing.

Please let's keep this professional. There is no reason to get defensive. If you knew 100% about GPOs you would not be asking the question you are asking. A good reference book should be able to help you through the rough spots and if you are pressed for time then external help in the way of a consultant could help as well.

Lookup how to use Loopback processing. Further take a look at policy inherritance and how to block it. While not as straight forward as applying settings based on user, this can be done based on computer.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

Hi Mark,
Thanks for the tips (Lookup how to use Loopback processing). I will look into it. I am sorry if you misunderstood the way I posted my question, I did not mean to be defensive.

 

[windowsfan]

Hi Mark,
That worked fine. Thanks again.

One more question. Current AD structure is as below
WorkStation OU Underneath Workstation OU I have OU1,2,3,4 etc for each dept. OU3 requires different logo than OU1,2 and 4. I have configured GP for OU3 with the special logo for their dept. Now rest of the OU will have similar logo, I can define GP for each OU and if I define GP at workstation OU that will work but how can prevent OU3 from getting setting from GP at workstation OU. I cannot configure block inheritance because OU3 get's GP setting domain's defaul policy.

when I log into other servers via RDP , my wallpaper changes to default homepage. There is a setting which I dont remember where I can say disable wallpaper for rdp session

I also want to configure my GP so that user cannot change the wallpaper by Right clicking any pictures and set as wallpaper. How can I prevent this?

Thanks in advance

 

[markdmac]

You have a few choices. Create one policy at the main Workstation OU and apply to all below it. Then create a new policy for OU3 and apply a modified version of the script that gives them their custom setting. This OU will override the other one.

You could also just create one GPO and then using GPMC link it to the 3 OUs that need it and do the same for the last.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

1)how can I use the below script from Mark to copy the logo to %userprofile%
Const TemporaryFolder = 2
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set tfolder = objFSO.GetSpecialFolder(TemporaryFolder)

If Not objFSO.FileExists(tfolder & "\logo.jpg") Then
objFSO.CopyFile "\\server\share\logo.jpg", tfolder & "\logo.jpg"
End If

2)How can I restrict user from changing the logo or any desktop releated settings.
I have configured prohibit changes in Active Desktop to be enabled. Do I need to configure other setting?

 

[markdmac]

Where within userprofile do you wish to copy the file to?

The following will grab the user profile path from the user's temp folder path.

On Error Resume Next
Set WSHNetwork = CreateObject("WScript.Network")
Set objFSO = CreateObject("Scripting.FileSystemObject")
UserString = WSHNetwork.UserName

Set tfolder = objFSO.GetSpecialFolder(2)
ProArray = Split(tfolder,"\")

For dir = 0 To UBound(ProArray)
	If InStr(ProArray(dir),UserString) Then
		EndOfProfile = dir
	End If
Next
For intPath = 0 To EndOfProfile
	proPath = proPath & ProArray(intPath) & "\"
Next
WScript.Echo proPath

Note that WSHNetwork has a WSHNetwork.UserProfile property, however I believe this is only available if you have set the profile in AD.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

is it possible to make changes to the below script from your previous post to use %userprofile% instead of tempfolder.
Const TemporaryFolder = 2
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set tfolder = objFSO.GetSpecialFolder(TemporaryFolder)

If Not objFSO.FileExists(tfolder & "\logo.jpg") Then
objFSO.CopyFile "\\server\share\logo.jpg", tfolder & "\logo.jpg"
End If

 

[windowsfan]

WhoKilledKenny,
How did you use %userprofile% in the script, I tried to use that in Mark's script and it is not working. Something wrong with the way I am using %userprofile%

Set objFSO = CreateObject("Scripting.FileSystemObject")
If Not objFSO.FileExists("%userprofile%\logo.jpg") Then
objFSO.CopyFile "\\server\share\logo.jpg", "%userprofile%\logo.jpg"
End If

 

[markdmac]

Did you look at the code in my last post? It grabs the user profile as a variable called proPath.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

Hi Mark,
I did look at the code in your previos post but I was just trying to figure out if I could use %userprofile% variable from your original script below. That would be really cool if I an make this work. I guess I am not using %userprfile% in right way?

Set objFSO = CreateObject("Scripting.FileSystemObject")
If Not objFSO.FileExists("%userprofile%\logo.jpg") Then
objFSO.CopyFile "\\server\share\logo.jpg", "%userprofile%\logo.jpg"
End If

 

[markdmac]

More than one way to skin a cat.

Give this a try:

Set WshShell=CreateObject("WScript.Shell")
USERPROFILE =WshShell.ExpandEnvironmentStrings("%USERPROFILE%")

Set objFSO = CreateObject("Scripting.FileSystemObject")
If Not objFSO.FileExists(USERPROFILE &"\logo.jpg") Then
    objFSO.CopyFile "\\server\share\logo.jpg", USERPROFILE &"\logo.jpg"
End If

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

Good job Mark, that worked fine.

I configured desktop for around 1000 users and its working great. Only one problem though.
some of the users gets default home page of IE as their desktop and not the wallpaper configured on AD, is it something else I have to configure?

 

[markdmac]

Yes, that is a setting in the GPOs for active desktop.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

what I have to configure so that user dont get IE home page as their wallpaper? ONly few of the users get IE home page as their wallpaper. For all other users it's just working fine.

 

[markdmac]

Been a while since I encountered that problem. As I recall it was due to users already having active desktop set on their PC before the GPO was applied.

I don't recall how I fixed this, but my first thought to troubleshoot it is to make the policy not apply to these users and turn off active desktop manually on the machines in question. The reapply the policy.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[windowsfan]

it's happening on all 2000 PC. I have enabled Active Desktop as part of the GP, do I have to disable this? I think if I disable this I want see any wallpaper.
Note: I am usig jpeg wallpaper.