Guest DawnTreader Posted June 20, 2008 Posted June 20, 2008 Hello All i am trying to set up a system for my terminal server, that would copy a file from a specific location as the user logs in, and then starts that file as the only application the user is allowed to run. here is the situation... i have an access application that we are running on a terminal server using a thin client setup. currently all users use the same access frontend located in a specific folder. this works, but makes updating that frontend a pain. i have to kick everyone out to do it. this application frontend should be copied to thier user account into thier terminal service profile. however with the amount of users doing this manually would take way to much time. what i would like is to have a login system in place that finds the frontend file and copies it to the users desktop in thier terminal server profile. then starts that file and is the only file that they can run. having the client frontend the only thing they can run is already working, but the copying of the file to every users frontend part is something i have no idea how to accomplish. the other thing i wonder about is if i have a logon script that copies the file everytime to the users profile would that cause a problem with the frontend being the only thing allowed to run at start up? i hope this makes some sense... i havent a lot of experience with terminal services and if someone could help me walk through this it would be greatly appreciated.
Guest Vera Noest [MVP] Posted June 21, 2008 Posted June 21, 2008 Re: Help with a configuration of profiles You can do the copying in your logon script, and define the frontend as the starting application in TS Configuration. Or define a new command file as the starting application, and do both the copying and execution of the frontend there. Something like: copy \\server\share\frontend.exe %userprofile%\Desktop start /wait %userprofile%\Desktop\frontend.exe _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?RGF3blRyZWFkZXI=?= <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in microsoft.public.windows.terminal_services: > Hello All > > i am trying to set up a system for my terminal server, that > would copy a file from a specific location as the user logs in, > and then starts that file as the only application the user is > allowed to run. > > here is the situation... > > i have an access application that we are running on a terminal > server using a thin client setup. currently all users use the > same access frontend located in a specific folder. this works, > but makes updating that frontend a pain. i have to kick everyone > out to do it. this application frontend should be copied to > thier user account into thier terminal service profile. however > with the amount of users doing this manually would take way to > much time. > > what i would like is to have a login system in place that finds > the frontend file and copies it to the users desktop in thier > terminal server profile. then starts that file and is the only > file that they can run. having the client frontend the only > thing they can run is already working, but the copying of the > file to every users frontend part is something i have no idea > how to accomplish. > > the other thing i wonder about is if i have a logon script that > copies the file everytime to the users profile would that cause > a problem with the frontend being the only thing allowed to run > at start up? > > i hope this makes some sense... i havent a lot of experience > with terminal services and if someone could help me walk through > this it would be greatly appreciated.
Guest DawnTreader Posted June 21, 2008 Posted June 21, 2008 Re: Help with a configuration of profiles Hello Vera so i would make a batch file with those commands? i have it set that on the enviroment tab it starts the frontend, but where would i put the login script? can i do it for a group of users, or does it have to be individually per user? we tried a test logon script in the profile - user profile - logon script and it didnt seem to work. do we need to put it some where else? these are all terminal server users so is there a difference between loging on directly to the machine or terminalling in? or would it use the profile set up regardless of how they are loging in? really new to trying to set up this kind of thing, thanks for any and all help. :) "Vera Noest [MVP]" wrote: > You can do the copying in your logon script, and define the > frontend as the starting application in TS Configuration. > Or define a new command file as the starting application, and do > both the copying and execution of the frontend there. Something > like: > > copy \\server\share\frontend.exe %userprofile%\Desktop > start /wait %userprofile%\Desktop\frontend.exe > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?RGF3blRyZWFkZXI=?= > <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in > microsoft.public.windows.terminal_services: > > > Hello All > > > > i am trying to set up a system for my terminal server, that > > would copy a file from a specific location as the user logs in, > > and then starts that file as the only application the user is > > allowed to run. > > > > here is the situation... > > > > i have an access application that we are running on a terminal > > server using a thin client setup. currently all users use the > > same access frontend located in a specific folder. this works, > > but makes updating that frontend a pain. i have to kick everyone > > out to do it. this application frontend should be copied to > > thier user account into thier terminal service profile. however > > with the amount of users doing this manually would take way to > > much time. > > > > what i would like is to have a login system in place that finds > > the frontend file and copies it to the users desktop in thier > > terminal server profile. then starts that file and is the only > > file that they can run. having the client frontend the only > > thing they can run is already working, but the copying of the > > file to every users frontend part is something i have no idea > > how to accomplish. > > > > the other thing i wonder about is if i have a logon script that > > copies the file everytime to the users profile would that cause > > a problem with the frontend being the only thing allowed to run > > at start up? > > > > i hope this makes some sense... i havent a lot of experience > > with terminal services and if someone could help me walk through > > this it would be greatly appreciated. >
Guest Vera Noest [MVP] Posted June 21, 2008 Posted June 21, 2008 Re: Help with a configuration of profiles I assume that you are talking about the user's TS-specific profile, and not their normal profile? Where and how exactly did you try to define the logon script? There are many ways to define a logon script for all users on a TS. Probably the easiest way is to define a logon script in a GPO linked to the OU which contains the Terminal Server: User Configuration - Windows Settings - Scripts Logon And since this is a user setting, you also have to use loopback processing of the GPO: Computer Configuration - Administrative Templates - System - Group Policy "User Group Policy loopback processing mode" - "Replace" Note that if you start the frontend in the environment tab of the user account, you should only put the copy command in the logon script. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?RGF3blRyZWFkZXI=?= <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in microsoft.public.windows.terminal_services: > Hello Vera > > so i would make a batch file with those commands? > > i have it set that on the enviroment tab it starts the > frontend, but where would i put the login script? can i do it > for a group of users, or does it have to be individually per > user? > > we tried a test logon script in the profile - user profile - > logon script and it didnt seem to work. > > do we need to put it some where else? these are all terminal > server users so is there a difference between loging on directly > to the machine or terminalling in? or would it use the profile > set up regardless of how they are loging in? > > really new to trying to set up this kind of thing, thanks for > any and all help. :) > > "Vera Noest [MVP]" wrote: > >> You can do the copying in your logon script, and define the >> frontend as the starting application in TS Configuration. >> Or define a new command file as the starting application, and >> do both the copying and execution of the frontend there. >> Something like: >> >> copy \\server\share\frontend.exe %userprofile%\Desktop >> start /wait %userprofile%\Desktop\frontend.exe >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in >> microsoft.public.windows.terminal_services: >> >> > Hello All >> > >> > i am trying to set up a system for my terminal server, that >> > would copy a file from a specific location as the user logs >> > in, and then starts that file as the only application the >> > user is allowed to run. >> > >> > here is the situation... >> > >> > i have an access application that we are running on a >> > terminal server using a thin client setup. currently all >> > users use the same access frontend located in a specific >> > folder. this works, but makes updating that frontend a pain. >> > i have to kick everyone out to do it. this application >> > frontend should be copied to thier user account into thier >> > terminal service profile. however with the amount of users >> > doing this manually would take way to much time. >> > >> > what i would like is to have a login system in place that >> > finds the frontend file and copies it to the users desktop in >> > thier terminal server profile. then starts that file and is >> > the only file that they can run. having the client frontend >> > the only thing they can run is already working, but the >> > copying of the file to every users frontend part is something >> > i have no idea how to accomplish. >> > >> > the other thing i wonder about is if i have a logon script >> > that copies the file everytime to the users profile would >> > that cause a problem with the frontend being the only thing >> > allowed to run at start up? >> > >> > i hope this makes some sense... i havent a lot of experience >> > with terminal services and if someone could help me walk >> > through this it would be greatly appreciated.
Guest DawnTreader Posted June 21, 2008 Posted June 21, 2008 Re: Help with a configuration of profiles ok we have a terminal server set up. the server is not on a domain. the only thing it is used for is the terminal services and MS access. access is what runs the front end of our database system that the users are logining in to. rarely does anyone use the machine by standing at the keyboard for it, and when they do it is to correct a problem with the users abilities to connect. when i manage users i am usually remoting in myself. currently all the users are using the same database file when they connect to the frontend. this file is the file that i want to copy everytime they login to thier profile and run it from there, rather than each user using the same copy of the file in the same location. so far it works, but i just know that things would be better if each user had thier own copy in thier profile. we have users created for everyone who logs into the terminal server and that users profile starts up the frontend everytime they log in. the settings we have for that to happen are found by right clicking and manage on my computer. then under local users and groups we have our users. when i go to the properties of one of those icons for the users and click the enviroment tab i end up with a place to tell it to start a specific program. in there we have it set to start access and to load the frontend file. the reason i am explaining this is i have no idea what GPO, OU and loopback processing mode is. you are talking to someone who has little experience with servers in general and once was responsible for crashing a windows 2000 server. :) i really need to have a step by step and explaination of terms like GPO. although i have a good guess at what GPO means, i could also be dead wrong. :) "Vera Noest [MVP]" wrote: > I assume that you are talking about the user's TS-specific profile, > and not their normal profile? > Where and how exactly did you try to define the logon script? > > There are many ways to define a logon script for all users on a TS. > Probably the easiest way is to define a logon script in a GPO > linked to the OU which contains the Terminal Server: > > User Configuration - Windows Settings - Scripts > Logon > > And since this is a user setting, you also have to use loopback > processing of the GPO: > > Computer Configuration - Administrative Templates - System - Group > Policy > "User Group Policy loopback processing mode" - "Replace" > > Note that if you start the frontend in the environment tab of the > user account, you should only put the copy command in the logon > script. > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?RGF3blRyZWFkZXI=?= > <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in > microsoft.public.windows.terminal_services: > > > Hello Vera > > > > so i would make a batch file with those commands? > > > > i have it set that on the enviroment tab it starts the > > frontend, but where would i put the login script? can i do it > > for a group of users, or does it have to be individually per > > user? > > > > we tried a test logon script in the profile - user profile - > > logon script and it didnt seem to work. > > > > do we need to put it some where else? these are all terminal > > server users so is there a difference between loging on directly > > to the machine or terminalling in? or would it use the profile > > set up regardless of how they are loging in? > > > > really new to trying to set up this kind of thing, thanks for > > any and all help. :) > > > > "Vera Noest [MVP]" wrote: > > > >> You can do the copying in your logon script, and define the > >> frontend as the starting application in TS Configuration. > >> Or define a new command file as the starting application, and > >> do both the copying and execution of the frontend there. > >> Something like: > >> > >> copy \\server\share\frontend.exe %userprofile%\Desktop > >> start /wait %userprofile%\Desktop\frontend.exe > >> _________________________________________________________ > >> Vera Noest > >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> TS troubleshooting: http://ts.veranoest.net > >> ___ please respond in newsgroup, NOT by private email ___ > >> > >> =?Utf-8?B?RGF3blRyZWFkZXI=?= > >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in > >> microsoft.public.windows.terminal_services: > >> > >> > Hello All > >> > > >> > i am trying to set up a system for my terminal server, that > >> > would copy a file from a specific location as the user logs > >> > in, and then starts that file as the only application the > >> > user is allowed to run. > >> > > >> > here is the situation... > >> > > >> > i have an access application that we are running on a > >> > terminal server using a thin client setup. currently all > >> > users use the same access frontend located in a specific > >> > folder. this works, but makes updating that frontend a pain. > >> > i have to kick everyone out to do it. this application > >> > frontend should be copied to thier user account into thier > >> > terminal service profile. however with the amount of users > >> > doing this manually would take way to much time. > >> > > >> > what i would like is to have a login system in place that > >> > finds the frontend file and copies it to the users desktop in > >> > thier terminal server profile. then starts that file and is > >> > the only file that they can run. having the client frontend > >> > the only thing they can run is already working, but the > >> > copying of the file to every users frontend part is something > >> > i have no idea how to accomplish. > >> > > >> > the other thing i wonder about is if i have a logon script > >> > that copies the file everytime to the users profile would > >> > that cause a problem with the frontend being the only thing > >> > allowed to run at start up? > >> > > >> > i hope this makes some sense... i havent a lot of experience > >> > with terminal services and if someone could help me walk > >> > through this it would be greatly appreciated. >
Guest Vera Noest [MVP] Posted June 22, 2008 Posted June 22, 2008 Re: Help with a configuration of profiles OK, I see. I was assuming that the Terminal Server was a member server of the domain, and that users logged on to the TS using their normal domain user accounts. I now understand that you have created local user accounts on the TS. In this scenario, GPOs (Group Policy Objects, or short Group Policies) won't work, they are a domain thingy. There is also a local policy on the Terminal Server, you can access and modify that by running the "gpedit.msc" command, but it isn't as powerful and flexible as domain-based GPOs. I's not clear to me if there is a domain at all. Do the user's client computers belong to a domain, and do they logon to the clients with their domain accounts? If so, I would recommend to make the TS also a member of the domain and skip the local accounts. Much easier for the users, and much less administrative overhead for you. If there is currently no domain at all, then you'll have to stick with your workgroup setup. It's not in the scope of this newsgroup to give a step-by-step guide of how to create a domain, OU (= Organisational Unit) and GPO structure. You can keep your current setup as-is, and just create a .bat file with the single line (change "server", "share" and "frontend.dbf" to match the searchpath to the frontend file): copy \\server\share\frontend.dbf %userprofile%\Desktop And maybe the easiest way to execute this bat file automatically for each user is by putting it in the Startup folder of each user's profile on the Terminal Server. Not the best solution, but easiest to explain. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?RGF3blRyZWFkZXI=?= <DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in microsoft.public.windows.terminal_services: > ok > > we have a terminal server set up. the server is not on a domain. > the only thing it is used for is the terminal services and MS > access. access is what runs the front end of our database system > that the users are logining in to. > > rarely does anyone use the machine by standing at the keyboard > for it, and when they do it is to correct a problem with the > users abilities to connect. when i manage users i am usually > remoting in myself. > > currently all the users are using the same database file when > they connect to the frontend. this file is the file that i want > to copy everytime they login to thier profile and run it from > there, rather than each user using the same copy of the file in > the same location. so far it works, but i just know that things > would be better if each user had thier own copy in thier > profile. > > we have users created for everyone who logs into the terminal > server and that users profile starts up the frontend everytime > they log in. the settings we have for that to happen are found > by right clicking and manage on my computer. > > then under local users and groups we have our users. when i go > to the properties of one of those icons for the users and click > the enviroment tab i end up with a place to tell it to start a > specific program. in there we have it set to start access and to > load the frontend file. > > the reason i am explaining this is i have no idea what GPO, OU > and loopback processing mode is. > > you are talking to someone who has little experience with > servers in general and once was responsible for crashing a > windows 2000 server. :) > > i really need to have a step by step and explaination of terms > like GPO. > > although i have a good guess at what GPO means, i could also be > dead wrong. :) > > "Vera Noest [MVP]" wrote: > >> I assume that you are talking about the user's TS-specific >> profile, and not their normal profile? >> Where and how exactly did you try to define the logon script? >> >> There are many ways to define a logon script for all users on a >> TS. Probably the easiest way is to define a logon script in a >> GPO linked to the OU which contains the Terminal Server: >> >> User Configuration - Windows Settings - Scripts >> Logon >> >> And since this is a user setting, you also have to use loopback >> processing of the GPO: >> >> Computer Configuration - Administrative Templates - System - >> Group Policy >> "User Group Policy loopback processing mode" - "Replace" >> >> Note that if you start the frontend in the environment tab of >> the user account, you should only put the copy command in the >> logon script. >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in >> microsoft.public.windows.terminal_services: >> >> > Hello Vera >> > >> > so i would make a batch file with those commands? >> > >> > i have it set that on the enviroment tab it starts the >> > frontend, but where would i put the login script? can i do it >> > for a group of users, or does it have to be individually per >> > user? >> > >> > we tried a test logon script in the profile - user profile - >> > logon script and it didnt seem to work. >> > >> > do we need to put it some where else? these are all terminal >> > server users so is there a difference between loging on >> > directly to the machine or terminalling in? or would it use >> > the profile set up regardless of how they are loging in? >> > >> > really new to trying to set up this kind of thing, thanks for >> > any and all help. :) >> > >> > "Vera Noest [MVP]" wrote: >> > >> >> You can do the copying in your logon script, and define the >> >> frontend as the starting application in TS Configuration. >> >> Or define a new command file as the starting application, >> >> and do both the copying and execution of the frontend there. >> >> Something like: >> >> >> >> copy \\server\share\frontend.exe %userprofile%\Desktop >> >> start /wait %userprofile%\Desktop\frontend.exe >> >> _________________________________________________________ >> >> Vera Noest >> >> MCSE, CCEA, Microsoft MVP - Terminal Server >> >> TS troubleshooting: http://ts.veranoest.net >> >> ___ please respond in newsgroup, NOT by private email ___ >> >> >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 >> >> in microsoft.public.windows.terminal_services: >> >> >> >> > Hello All >> >> > >> >> > i am trying to set up a system for my terminal server, >> >> > that would copy a file from a specific location as the >> >> > user logs in, and then starts that file as the only >> >> > application the user is allowed to run. >> >> > >> >> > here is the situation... >> >> > >> >> > i have an access application that we are running on a >> >> > terminal server using a thin client setup. currently all >> >> > users use the same access frontend located in a specific >> >> > folder. this works, but makes updating that frontend a >> >> > pain. i have to kick everyone out to do it. this >> >> > application frontend should be copied to thier user >> >> > account into thier terminal service profile. however with >> >> > the amount of users doing this manually would take way to >> >> > much time. >> >> > >> >> > what i would like is to have a login system in place that >> >> > finds the frontend file and copies it to the users desktop >> >> > in thier terminal server profile. then starts that file >> >> > and is the only file that they can run. having the client >> >> > frontend the only thing they can run is already working, >> >> > but the copying of the file to every users frontend part >> >> > is something i have no idea how to accomplish. >> >> > >> >> > the other thing i wonder about is if i have a logon script >> >> > that copies the file everytime to the users profile would >> >> > that cause a problem with the frontend being the only >> >> > thing allowed to run at start up? >> >> > >> >> > i hope this makes some sense... i havent a lot of >> >> > experience with terminal services and if someone could >> >> > help me walk through this it would be greatly appreciated.
Guest DawnTreader Posted June 23, 2008 Posted June 23, 2008 Re: Help with a configuration of profiles Hello Vera first i want to thank you for your help, you are the most on the ball person who has ever helped me on this site. you are correct, this server is stand alone. again we use it as a portal to the db client that we have set up. we keep it off the domain as a security measure. i followed a few of the things you wrote about to see what i could find. i went in to the gpedit.msc and that helped immensly, i now have an idea of where i need to make the changes i want to make. i tried making a file that would start on login, the IT manager said to name it default.cmd. in it we did a little test, "echo hello", "pause". it didnt work. but then we never went to the gpedit.msc and added it to the "scripts (logon/logoff)" configuration setup i found. should i make it a .bat file? and should i add it to the properties window i find when i right click, properties on the "scripts (logon/logoff)" i found? understand that i want to be careful, i dont want to cause a problem on this server because of the nature of the set up. so i wont do anything without knowing from someone somewhere that i should. even though i think this is where and what i should be doing, i dont plan on killing another server. if i put the .bat in the startup would that cause it to fire before the setting for the users to start a program upon connection? or do i need it to be somewhere else for that? again thanks for all your help. :) "Vera Noest [MVP]" wrote: > OK, I see. > I was assuming that the Terminal Server was a member server of the > domain, and that users logged on to the TS using their normal > domain user accounts. > I now understand that you have created local user accounts on the > TS. > In this scenario, GPOs (Group Policy Objects, or short Group > Policies) won't work, they are a domain thingy. There is also a > local policy on the Terminal Server, you can access and modify that > by running the "gpedit.msc" command, but it isn't as powerful and > flexible as domain-based GPOs. > > I's not clear to me if there is a domain at all. Do the user's > client computers belong to a domain, and do they logon to the > clients with their domain accounts? If so, I would recommend to > make the TS also a member of the domain and skip the local > accounts. Much easier for the users, and much less administrative > overhead for you. > > If there is currently no domain at all, then you'll have to stick > with your workgroup setup. It's not in the scope of this newsgroup > to give a step-by-step guide of how to create a domain, OU (= > Organisational Unit) and GPO structure. > > You can keep your current setup as-is, and just create a .bat file > with the single line (change "server", "share" and "frontend.dbf" > to match the searchpath to the frontend file): > copy \\server\share\frontend.dbf %userprofile%\Desktop > > And maybe the easiest way to execute this bat file automatically > for each user is by putting it in the Startup folder of each user's > profile on the Terminal Server. Not the best solution, but easiest > to explain. > _________________________________________________________ > Vera Noest > MCSE, CCEA, Microsoft MVP - Terminal Server > TS troubleshooting: http://ts.veranoest.net > ___ please respond in newsgroup, NOT by private email ___ > > =?Utf-8?B?RGF3blRyZWFkZXI=?= > <DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in > microsoft.public.windows.terminal_services: > > > ok > > > > we have a terminal server set up. the server is not on a domain. > > the only thing it is used for is the terminal services and MS > > access. access is what runs the front end of our database system > > that the users are logining in to. > > > > rarely does anyone use the machine by standing at the keyboard > > for it, and when they do it is to correct a problem with the > > users abilities to connect. when i manage users i am usually > > remoting in myself. > > > > currently all the users are using the same database file when > > they connect to the frontend. this file is the file that i want > > to copy everytime they login to thier profile and run it from > > there, rather than each user using the same copy of the file in > > the same location. so far it works, but i just know that things > > would be better if each user had thier own copy in thier > > profile. > > > > we have users created for everyone who logs into the terminal > > server and that users profile starts up the frontend everytime > > they log in. the settings we have for that to happen are found > > by right clicking and manage on my computer. > > > > then under local users and groups we have our users. when i go > > to the properties of one of those icons for the users and click > > the enviroment tab i end up with a place to tell it to start a > > specific program. in there we have it set to start access and to > > load the frontend file. > > > > the reason i am explaining this is i have no idea what GPO, OU > > and loopback processing mode is. > > > > you are talking to someone who has little experience with > > servers in general and once was responsible for crashing a > > windows 2000 server. :) > > > > i really need to have a step by step and explaination of terms > > like GPO. > > > > although i have a good guess at what GPO means, i could also be > > dead wrong. :) > > > > "Vera Noest [MVP]" wrote: > > > >> I assume that you are talking about the user's TS-specific > >> profile, and not their normal profile? > >> Where and how exactly did you try to define the logon script? > >> > >> There are many ways to define a logon script for all users on a > >> TS. Probably the easiest way is to define a logon script in a > >> GPO linked to the OU which contains the Terminal Server: > >> > >> User Configuration - Windows Settings - Scripts > >> Logon > >> > >> And since this is a user setting, you also have to use loopback > >> processing of the GPO: > >> > >> Computer Configuration - Administrative Templates - System - > >> Group Policy > >> "User Group Policy loopback processing mode" - "Replace" > >> > >> Note that if you start the frontend in the environment tab of > >> the user account, you should only put the copy command in the > >> logon script. > >> _________________________________________________________ > >> Vera Noest > >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> TS troubleshooting: http://ts.veranoest.net > >> ___ please respond in newsgroup, NOT by private email ___ > >> > >> =?Utf-8?B?RGF3blRyZWFkZXI=?= > >> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in > >> microsoft.public.windows.terminal_services: > >> > >> > Hello Vera > >> > > >> > so i would make a batch file with those commands? > >> > > >> > i have it set that on the enviroment tab it starts the > >> > frontend, but where would i put the login script? can i do it > >> > for a group of users, or does it have to be individually per > >> > user? > >> > > >> > we tried a test logon script in the profile - user profile - > >> > logon script and it didnt seem to work. > >> > > >> > do we need to put it some where else? these are all terminal > >> > server users so is there a difference between loging on > >> > directly to the machine or terminalling in? or would it use > >> > the profile set up regardless of how they are loging in? > >> > > >> > really new to trying to set up this kind of thing, thanks for > >> > any and all help. :) > >> > > >> > "Vera Noest [MVP]" wrote: > >> > > >> >> You can do the copying in your logon script, and define the > >> >> frontend as the starting application in TS Configuration. > >> >> Or define a new command file as the starting application, > >> >> and do both the copying and execution of the frontend there. > >> >> Something like: > >> >> > >> >> copy \\server\share\frontend.exe %userprofile%\Desktop > >> >> start /wait %userprofile%\Desktop\frontend.exe > >> >> _________________________________________________________ > >> >> Vera Noest > >> >> MCSE, CCEA, Microsoft MVP - Terminal Server > >> >> TS troubleshooting: http://ts.veranoest.net > >> >> ___ please respond in newsgroup, NOT by private email ___ > >> >> > >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= > >> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 > >> >> in microsoft.public.windows.terminal_services: > >> >> > >> >> > Hello All > >> >> > > >> >> > i am trying to set up a system for my terminal server, > >> >> > that would copy a file from a specific location as the > >> >> > user logs in, and then starts that file as the only > >> >> > application the user is allowed to run. > >> >> > > >> >> > here is the situation... > >> >> > > >> >> > i have an access application that we are running on a > >> >> > terminal server using a thin client setup. currently all > >> >> > users use the same access frontend located in a specific > >> >> > folder. this works, but makes updating that frontend a > >> >> > pain. i have to kick everyone out to do it. this > >> >> > application frontend should be copied to thier user > >> >> > account into thier terminal service profile. however with > >> >> > the amount of users doing this manually would take way to > >> >> > much time. > >> >> > > >> >> > what i would like is to have a login system in place that > >> >> > finds the frontend file and copies it to the users desktop > >> >> > in thier terminal server profile. then starts that file > >> >> > and is the only file that they can run. having the client > >> >> > frontend the only thing they can run is already working, > >> >> > but the copying of the file to every users frontend part > >> >> > is something i have no idea how to accomplish. > >> >> > > >> >> > the other thing i wonder about is if i have a logon script > >> >> > that copies the file everytime to the users profile would > >> >> > that cause a problem with the frontend being the only > >> >> > thing allowed to run at start up? > >> >> > > >> >> > i hope this makes some sense... i havent a lot of > >> >> > experience with terminal services and if someone could > >> >> > help me walk through this it would be greatly appreciated. >
Guest Vera Noest [MVP] Posted July 1, 2008 Posted July 1, 2008 Re: Help with a configuration of profiles Sorry for not getting back to you sooner, I've been away for a short holiday. It doesn't matter whether you call the file <something>.cmd or <something>.bat, both are executable files and can do the same thing. And just creating the file doesn't execute it, you will have to define it either as a logon script in the local policy of the server, or put it in the users Startup folder. Your IT manager should also be able to help you implement this. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?RGF3blRyZWFkZXI=?= <DawnTreader@discussions.microsoft.com> wrote on 23 jun 2008 in microsoft.public.windows.terminal_services: > Hello Vera > > first i want to thank you for your help, you are the most on the > ball person who has ever helped me on this site. > > you are correct, this server is stand alone. again we use it as > a portal to the db client that we have set up. we keep it off > the domain as a security measure. i followed a few of the things > you wrote about to see what i could find. i went in to the > gpedit.msc and that helped immensly, i now have an idea of where > i need to make the changes i want to make. > > i tried making a file that would start on login, the IT manager > said to name it default.cmd. in it we did a little test, "echo > hello", "pause". it didnt work. but then we never went to the > gpedit.msc and added it to the "scripts (logon/logoff)" > configuration setup i found. > > should i make it a .bat file? and should i add it to the > properties window i find when i right click, properties on the > "scripts (logon/logoff)" i found? understand that i want to be > careful, i dont want to cause a problem on this server because > of the nature of the set up. so i wont do anything without > knowing from someone somewhere that i should. even though i > think this is where and what i should be doing, i dont plan on > killing another server. > > if i put the .bat in the startup would that cause it to fire > before the setting for the users to start a program upon > connection? or do i need it to be somewhere else for that? > > again thanks for all your help. :) > > "Vera Noest [MVP]" wrote: > >> OK, I see. >> I was assuming that the Terminal Server was a member server of >> the domain, and that users logged on to the TS using their >> normal domain user accounts. >> I now understand that you have created local user accounts on >> the TS. >> In this scenario, GPOs (Group Policy Objects, or short Group >> Policies) won't work, they are a domain thingy. There is also a >> local policy on the Terminal Server, you can access and modify >> that by running the "gpedit.msc" command, but it isn't as >> powerful and flexible as domain-based GPOs. >> >> I's not clear to me if there is a domain at all. Do the user's >> client computers belong to a domain, and do they logon to the >> clients with their domain accounts? If so, I would recommend to >> make the TS also a member of the domain and skip the local >> accounts. Much easier for the users, and much less >> administrative overhead for you. >> >> If there is currently no domain at all, then you'll have to >> stick with your workgroup setup. It's not in the scope of this >> newsgroup to give a step-by-step guide of how to create a >> domain, OU (= Organisational Unit) and GPO structure. >> >> You can keep your current setup as-is, and just create a .bat >> file with the single line (change "server", "share" and >> "frontend.dbf" to match the searchpath to the frontend file): >> copy \\server\share\frontend.dbf %userprofile%\Desktop >> >> And maybe the easiest way to execute this bat file >> automatically for each user is by putting it in the Startup >> folder of each user's profile on the Terminal Server. Not the >> best solution, but easiest to explain. >> _________________________________________________________ >> Vera Noest >> MCSE, CCEA, Microsoft MVP - Terminal Server >> TS troubleshooting: http://ts.veranoest.net >> ___ please respond in newsgroup, NOT by private email ___ >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> <DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in >> microsoft.public.windows.terminal_services: >> >> > ok >> > >> > we have a terminal server set up. the server is not on a >> > domain. the only thing it is used for is the terminal >> > services and MS access. access is what runs the front end of >> > our database system that the users are logining in to. >> > >> > rarely does anyone use the machine by standing at the >> > keyboard for it, and when they do it is to correct a problem >> > with the users abilities to connect. when i manage users i am >> > usually remoting in myself. >> > >> > currently all the users are using the same database file when >> > they connect to the frontend. this file is the file that i >> > want to copy everytime they login to thier profile and run it >> > from there, rather than each user using the same copy of the >> > file in the same location. so far it works, but i just know >> > that things would be better if each user had thier own copy >> > in thier profile. >> > >> > we have users created for everyone who logs into the terminal >> > server and that users profile starts up the frontend >> > everytime they log in. the settings we have for that to >> > happen are found by right clicking and manage on my computer. >> > >> > then under local users and groups we have our users. when i >> > go to the properties of one of those icons for the users and >> > click the enviroment tab i end up with a place to tell it to >> > start a specific program. in there we have it set to start >> > access and to load the frontend file. >> > >> > the reason i am explaining this is i have no idea what GPO, >> > OU and loopback processing mode is. >> > >> > you are talking to someone who has little experience with >> > servers in general and once was responsible for crashing a >> > windows 2000 server. :) >> > >> > i really need to have a step by step and explaination of >> > terms like GPO. >> > >> > although i have a good guess at what GPO means, i could also >> > be dead wrong. :) >> > >> > "Vera Noest [MVP]" wrote: >> > >> >> I assume that you are talking about the user's TS-specific >> >> profile, and not their normal profile? >> >> Where and how exactly did you try to define the logon >> >> script? >> >> >> >> There are many ways to define a logon script for all users >> >> on a TS. Probably the easiest way is to define a logon >> >> script in a GPO linked to the OU which contains the Terminal >> >> Server: >> >> >> >> User Configuration - Windows Settings - Scripts >> >> Logon >> >> >> >> And since this is a user setting, you also have to use >> >> loopback processing of the GPO: >> >> >> >> Computer Configuration - Administrative Templates - System - >> >> Group Policy >> >> "User Group Policy loopback processing mode" - "Replace" >> >> >> >> Note that if you start the frontend in the environment tab >> >> of the user account, you should only put the copy command in >> >> the logon script. >> >> _________________________________________________________ >> >> Vera Noest >> >> MCSE, CCEA, Microsoft MVP - Terminal Server >> >> TS troubleshooting: http://ts.veranoest.net >> >> ___ please respond in newsgroup, NOT by private email ___ >> >> >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> >> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 >> >> in microsoft.public.windows.terminal_services: >> >> >> >> > Hello Vera >> >> > >> >> > so i would make a batch file with those commands? >> >> > >> >> > i have it set that on the enviroment tab it starts the >> >> > frontend, but where would i put the login script? can i do >> >> > it for a group of users, or does it have to be >> >> > individually per user? >> >> > >> >> > we tried a test logon script in the profile - user profile >> >> > - logon script and it didnt seem to work. >> >> > >> >> > do we need to put it some where else? these are all >> >> > terminal server users so is there a difference between >> >> > loging on directly to the machine or terminalling in? or >> >> > would it use the profile set up regardless of how they are >> >> > loging in? >> >> > >> >> > really new to trying to set up this kind of thing, thanks >> >> > for any and all help. :) >> >> > >> >> > "Vera Noest [MVP]" wrote: >> >> > >> >> >> You can do the copying in your logon script, and define >> >> >> the frontend as the starting application in TS >> >> >> Configuration. Or define a new command file as the >> >> >> starting application, and do both the copying and >> >> >> execution of the frontend there. Something like: >> >> >> >> >> >> copy \\server\share\frontend.exe %userprofile%\Desktop >> >> >> start /wait %userprofile%\Desktop\frontend.exe >> >> >> _________________________________________________________ >> >> >> Vera Noest >> >> >> MCSE, CCEA, Microsoft MVP - Terminal Server >> >> >> TS troubleshooting: http://ts.veranoest.net >> >> >> ___ please respond in newsgroup, NOT by private email ___ >> >> >> >> >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?= >> >> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun >> >> >> 2008 in microsoft.public.windows.terminal_services: >> >> >> >> >> >> > Hello All >> >> >> > >> >> >> > i am trying to set up a system for my terminal server, >> >> >> > that would copy a file from a specific location as the >> >> >> > user logs in, and then starts that file as the only >> >> >> > application the user is allowed to run. >> >> >> > >> >> >> > here is the situation... >> >> >> > >> >> >> > i have an access application that we are running on a >> >> >> > terminal server using a thin client setup. currently >> >> >> > all users use the same access frontend located in a >> >> >> > specific folder. this works, but makes updating that >> >> >> > frontend a pain. i have to kick everyone out to do it. >> >> >> > this application frontend should be copied to thier >> >> >> > user account into thier terminal service profile. >> >> >> > however with the amount of users doing this manually >> >> >> > would take way to much time. >> >> >> > >> >> >> > what i would like is to have a login system in place >> >> >> > that finds the frontend file and copies it to the users >> >> >> > desktop in thier terminal server profile. then starts >> >> >> > that file and is the only file that they can run. >> >> >> > having the client frontend the only thing they can run >> >> >> > is already working, but the copying of the file to >> >> >> > every users frontend part is something i have no idea >> >> >> > how to accomplish. >> >> >> > >> >> >> > the other thing i wonder about is if i have a logon >> >> >> > script that copies the file everytime to the users >> >> >> > profile would that cause a problem with the frontend >> >> >> > being the only thing allowed to run at start up? >> >> >> > >> >> >> > i hope this makes some sense... i havent a lot of >> >> >> > experience with terminal services and if someone could >> >> >> > help me walk through this it would be greatly >> >> >> > appreciated.
Recommended Posts