Hide logon scripts 1

[pinkpanther56]

At the moment our vbs logon scripts are located in our netlogon folder, could these be moved to a hidden share so that they aren't so easily browsable?

I know this share might not replicate but what's the point in hidden shares if someone can just browse to your netlogon share and view your logon scripts?

Thanks.

 

[mikiemov]

You could actually let the logon scripts run using a GPO and save the vb scripts within the GPO folder and remove them from the \\servername\netlogon folder....

 

[pinkpanther56]

I do execute the scripts from a GPO but they run from netlogon. Where is the location that you suggest?

Thanks.

 

[mikiemov]

From memory, at the point where you add the logon scripts to the GPO there is an option for "show files"...I think it is, this is a folder within the GPO itself.

Cut/paste the logon scripts to this folder then add the scripts to the GPO from this location as opposed to the netlogon share....

The scripts are still visible from the sysvol share, but you have to drill down through a lot of folders to get to them.

Mike,

 

[pinkpanther56]

Ahhh good idea i'll take a look.

Cheers.

 

[tfg13]

By the way, you can actually have the login scripts on any server in any folder, as long as you use the full UNC to that folder/login script, and have the correct permissions on the folder/script. You can also use the "hidden" option, but that doesn't help much with someone who knows how to "Show hidden files and folders".

 

[pinkpanther56]

I already have them hidden but in the netlogon share, i was hoping to be able to put them in a hidden $ share.

Would it be possible to have a hidden share replicate using DFS?

 

[markdmac]

The suggestion to move the files to within the GPO itself is the best solution. Your users won't browse to them there.

From within the GPO expand out Windows Settings, Scripts, Login Scripts. Double click Login Scripts. Click Show Files. Paste your files there.

Behind the scenes they will exist in AD in Sysvol\Policies\Policy GUID\Scripts\Login.

I hope you find this post helpful.

Regards,

Mark

 

[mikiemov]

Which is where my post suggested......

 

[pinkpanther56]

Thanks guys that solution does seem to be the best.

 

[markdmac]

Yes mikiemov, I was agreeing with you...

I hope you find this post helpful.

Regards,

Mark

 

[mikiemov]

Re-Read,

markdmac having a bad day AND its Monday...

 

[markdmac]

No worries. We all have bad days.

I hope you find this post helpful.

Regards,

Mark