|
If I am not mistaken, newly created
profiles take the defaults from: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main] Set the "Start Page" and
"Search Page" there and the newly created profiles will pick the settings
from there. If you want to automate it, create a
custom administrative template to deploy the registry settings to all your
workstations with a GPO and you are done. From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Gauss Excellent. Thanks for the tip.
I totally forgot about setting permissions on the group. On the delete of the group I actually
meant to say delete from the group. From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kamlesh Parmar Nice to know, that it worked out for you. >I also tried using the /delete to
delete the group but if the person isnt in that group the script just
hangs. If you just give "add/remove self as member" access it
doesn't work thru GUI. You have to specifically go to propery level permission
and assign WRITE access on members attribute, then members will be able to
manage their membership of group. Give that right to SELF security principal.
( I just tested that again) Also, one caveat, If you have an AD2000 forest or an AD2003 forest
running on the Windows 2000 functional level, you should take into account the
following warning: If you delegate group management to members, it might create
problem if user update their membership on different DC. All members of a
group are stored in one multivalued property. If that member list is modified
on two domain controllers simultaneously (within replication latency), one of
the two changes will be lost. - Kamlesh On 11/22/05, Craig
Gauss <[EMAIL PROTECTED]>
wrote: Been working on this one most of the
day.....have it sort of working. Needed to use CPAU from joeware, but there
is one problem. The password is displayed in the batch which is pretty
much unsecure and goes against any password policy. Anyways, I have it
adding the user to the correct group upon logon. It takes a little while
though for the user to show in the group. I also tried using the /delete
to delete the group but if the person isnt in that group the script just hangs.
From: [EMAIL PROTECTED]
[mailto: [EMAIL PROTECTED]]
On Behalf Of Micheal S. Mand Craig, Quoting what Kamlesh said before your email: "To remove logged-in user, I
would use something like His email was sent 11/19/2005 10:37 AM. If you
didn't get it I can forward that to you. Thanks, Micheal -----Original Message----- How would you go about
removing the user from the group in a login script? From: [EMAIL PROTECTED]
[mailto: [EMAIL PROTECTED]]
On Behalf Of Kamlesh Parmar Building on what James said, On 11/18/05, Blair,
James < [EMAIL PROTECTED]> wrote: Michael, You could create a new
user security group and a GPO for the homepage. Use security filtering so that
group only gets the policy. Remove the new users from the group after x days. James From: [EMAIL PROTECTED]
[mailto:
[EMAIL PROTECTED]] On
Behalf Of Brian Desmond How about a logon script to take care of this? Check for a HKCU
key/value. If it's not there, assume it's the first logon and set their
homepage and then set the homepage. From: [EMAIL PROTECTED]
[mailto:
[EMAIL PROTECTED]] On
Behalf Of Micheal S. Mand Hello, I just joined the list,
so forgive me if this has been answered already. I've been put to the
task of using AD to set the home page of all NEW users to our company intranet,
but not override the current user's settings. We want this to happen
automatically because we are usually creating new users with little notice, and
very little time to make the account active. I've searched and searched all
over existence for something related to this, and so far have only come up with
some hacks to permanently set every user's home page the same. We want users to
be able to change this home page if they wish, without it resetting every time
they log in to their machine. If they log into a new machine, we could also set
the home page to the intranet, but this isn't as necessary. Has anyone even heard
of doing anything like this? Is it even possible? Thanks in advance, Micheal
S. Mand
|
- RE: [ActiveDir] Internet Explorer Home Page Question Micheal S. Mand
- RE: [ActiveDir] Internet Explorer Home Page Question Micheal S. Mand
- RE: [ActiveDir] Internet Explorer Home Page Question Guy Teverovsky
- RE: [ActiveDir] Internet Explorer Home Page Question Craig Gauss
- RE: [ActiveDir] Internet Explorer Home Page Question Micheal S. Mand
- RE: [ActiveDir] Internet Explorer Home Page Question Micheal S. Mand
- RE: [ActiveDir] Internet Explorer Home Page Question Craig Gauss
