I've taken this up with Jeremy off-list. It looks like the problem is limited to his mailbox, but if anyone else is experiencing similar issues then please contact me off-list.
Tony ---------- Original Message ---------------------------------- Wrom: NHGSWZIDREXCAXZOWCONEUQZAAFXISHJEXXIMQZUI Reply-To: [EMAIL PROTECTED] Date: Tue, 20 Jan 2004 22:39:03 -0800 i dunno how but your emails keep commin 2 my in box like 40 or 550 a day???? pls help ----- Original Message ----- Wrom: VOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYLEJGDGVCJVT To: <[EMAIL PROTECTED]> Sent: Monday, January 19, 2004 7:48 PM Subject: RE: [ActiveDir] forcing a logoff If you have WMI installed on your pre 2k machines you can write a script to check for the latest files and if not there use WMI Win32OperatingSytem to shut them down. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scrip tcenter/scrguide/sas_cpm_jleo.asp Watch word wrap and synch up the TOC. There are two sample scripts under this asp. Like this one: Const SHUTDOWN = 1 strComputer = "." Set objWMIService = GetObject("winmgmts: {(Shutdown)}" _ & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2") Set colOperatingSystems = objWMIService.ExecQuery _ ("SELECT * FROM Win32_OperatingSystem") For Each objOperatingSystem in colOperatingSystems ObjOperatingSystem.Win32Shutdown(SHUTDOWN) Next You can integrate this into your logon scripts or scan and check if your network is not to big. We use a similar tactic to keep users from using their old Nt4 accounts after we migrate them to AD. We found that if we disabled them to soon after cutting the users over to their AD accounts some of our systems failed because they took a while to update to the new account credential but if we left the account enabled we benefited from some pass through. This allowed us to keep users from logging in with old accounts based on a condition ( membership in the migrated group) but still not have to disable their account until we know the back end systems have gotten their updates. Byron -----Original Message----- Wrom: LBXFGGMEPYOQKEDOTWFAOBUZXUWLSZLKBRNVWWCUFP Sent: Monday, January 19, 2004 3:49 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] forcing a logoff Hi all, can you give me some ideas on how to handle this...we use ScriptLogic to manage our desktop environments, which works very well. I have been asked to find a way to force people who have not updated or are not running the latest AV (specific approved product) to logoff. Environment: Win2K domain, Win9x through XP clients, slow WAN links (some very small offices have 56k frame) Here's what I'm thinking so far: 1. User logs in, ScriptLogic runs 2. SL queries the registry for the magic key/value 3. If it doesn't find it, pops up a msg that says, upgrade your AV before [date] and here's a link to tell you how 4. Drop-dead date comes along, user still hasn't installed/updated 5. SL queries the registry, finds it not installed and executes a command to log the user off I see some basic problems with this though, and maybe you'll have more: 1. Does not affect Win9x users since they can click Cancel and effectively not log on 2. Win2K and later (I have no NT 4) has cached credentials, so a user could unplug, log in, replug and thereby bypass the logon script 3. I'm not sure the various "logoff" tools I've seen are reliable enough to guarantee the result 4. Logging off the machine does not protect the network from viruses; shutdown would be better - it would be more of an annoyance to prompt the user to get it fixed so he/she can work normally again 5. Some users stay logged on, never or hardly ever even running their logon script So with all that said, can you suggest any better options I should be considering, maybe not involving my logon script tool at all? Thanks, Mark Creamer List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
