ADUC Scripting
-
Friday, August 17, 2012 8:04 PM
Hello experts!
I'm hoping this can be accomplished, so here goes...
Currently we have commands in the Notes attribute in User's AD accounts that will do things like set up a printer (ptr "share name"), set a default printer (sdp "share name"), and create a shortcut on a user's desktop (csc "path to shortcut", "name of shortcut", "shortcut's target", "icon", "working folder"). This works great when creating a shortcut to a network share because "folder" in the "icon" place will create a shortcut to the network share with a folder icon on the user's desktop.
However, I tried to create an internet shortcut (it's a shortcut to a Sharepoint site) using this method, but I cannot get the IE icon to show. Anything other than "folder" will show the default icon Windows uses when it doesn't know what program to use. So, I scrapped that idea and created a logon script to create a shortcut with the Sharepoint icon. The script works fine if you run it, but I cannot figure out how to get it to run from the Notes attribute in the AD account.
I know, I know, it would be so much easier just to run it from the NETLOGON folder on the Domain Controller or using Group Policy, but I'm just a local tech and don't have access to either of those, so I'm looking for a workaround. Getting someone above me to do it would be like pulling teeth.
Either it can't be done, or I'm not using the proper syntax for it to work. Thanks in advance for your input!
All Replies
-
Friday, August 17, 2012 9:28 PM
Nothing you are saying makes any sense.
There are no shortcuts stored in AD. It sounds like you have some third party software installed that has added some features. You should probably contact the vendor of your software for instructions.
¯\_(ツ)_/¯
-
Friday, August 17, 2012 9:35 PM
"Nothing you are saying makes any sense."? Really??
No shortcut is stored in AD. It's scripted in the NOTES attribute to create the shortcut on the user's desktop. Just like mapping a drive from the NOTES attribute. I suppose that's 3rd party too?
-
Friday, August 17, 2012 9:45 PM
Putting anything in the notes arrtribute does not cause anything to be added to windows. There has to be something that reads that and does. the work. That is usually third party add-ons. It was popular in NT4 and then again in W2K to put things in the comment and description fields. As soon as every one learned about Group Policy and AD profiles this went out of vogue.
Are you saying you are using one of these older methods that pre-date Group POlicy and logon script.?
¯\_(ツ)_/¯
- Edited by jrvMicrosoft Community Contributor Saturday, August 18, 2012 12:52 AM
-
Friday, August 17, 2012 10:17 PM either a third party tool, or a home-grown logon script that reads these "commands" from the notes field and executes them. Trouble is, this may have been setup by someone long gone, and the current IT support staff have just come to believe that whatever they pot in the notes field just does what it does on its own.
Al Dunbar -- remember to 'mark or propose as answer' or 'vote as helpful' as appropriate.
- Marked As Answer by Bill_StewartMicrosoft Community Contributor, Moderator Sunday, August 19, 2012 2:41 AM
-
Saturday, August 18, 2012 5:30 PMModerator
I assume you are referring to the "Notes" field on the "Telephone" tab of ADUC. This corresponds to the "info" attribute of the user object, which is similar to any other single-valued string attribute. You can make the value anything. There is no provision in AD for anything to be done based on this attribute.
My guess is that you have a logon script that reads the value and attempts to run it as a command. However, I'm not familiar with any of the commands you refer to (ptr, sdp, csc). These must also be proprietary, possible interpreted by the logon script. I'm afraid we have no way to assist you, at least without seeing the logon script.
If your tech support cannot assist you, I have to ask why they are employed? What is the purpose of their jobs (besides keeping busy)? Does no one have responsibility for the logon script and for meeting the needs of their "customers"?
If your network has logon scripts like this running with no one responsible for them, your organization has serious problems.
Richard Mueller - MVP Directory Services
-
Saturday, August 18, 2012 6:39 PM
I assume you are referring to the "Notes" field on the "Telephone" tab of ADUC. This corresponds to the "info" attribute of the user object, which is similar to any other single-valued string attribute. You can make the value anything. There is no provision in AD for anything to be done based on this attribute.
My guess is that you have a logon script that reads the value and attempts to run it as a command. However, I'm not familiar with any of the commands you refer to (ptr, sdp, csc). These must also be proprietary, possible interpreted by the logon script. I'm afraid we have no way to assist you, at least without seeing the logon script.
If your tech support cannot assist you, I have to ask why they are employed? What is the purpose of their jobs (besides keeping busy)? Does no one have responsibility for the logon script and for meeting the needs of their "customers"?
If your network has logon scripts like this running with no one responsible for them, your organization has serious problems.
Richard Mueller - MVP Directory Services
Harsh, but necessarily so, and good info for the OP.
Al Dunbar -- remember to 'mark or propose as answer' or 'vote as helpful' as appropriate.
.png)
