Help with a configuration of profiles

  • Thread starter Thread starter DawnTreader
  • Start date Start date
D

DawnTreader

Guest
Hello All

i am trying to set up a system for my terminal server, that would copy a
file from a specific location as the user logs in, and then starts that file
as the only application the user is allowed to run.

here is the situation...

i have an access application that we are running on a terminal server using
a thin client setup. currently all users use the same access frontend located
in a specific folder. this works, but makes updating that frontend a pain. i
have to kick everyone out to do it. this application frontend should be
copied to thier user account into thier terminal service profile. however
with the amount of users doing this manually would take way to much time.

what i would like is to have a login system in place that finds the frontend
file and copies it to the users desktop in thier terminal server profile.
then starts that file and is the only file that they can run. having the
client frontend the only thing they can run is already working, but the
copying of the file to every users frontend part is something i have no idea
how to accomplish.

the other thing i wonder about is if i have a logon script that copies the
file everytime to the users profile would that cause a problem with the
frontend being the only thing allowed to run at start up?

i hope this makes some sense... i havent a lot of experience with terminal
services and if someone could help me walk through this it would be greatly
appreciated.
 
Re: Help with a configuration of profiles

You can do the copying in your logon script, and define the
frontend as the starting application in TS Configuration.
Or define a new command file as the starting application, and do
both the copying and execution of the frontend there. Something
like:

copy \\server\share\frontend.exe %userprofile%\Desktop
start /wait %userprofile%\Desktop\frontend.exe
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?RGF3blRyZWFkZXI=?=
<DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in
microsoft.public.windows.terminal_services:

> Hello All
>
> i am trying to set up a system for my terminal server, that
> would copy a file from a specific location as the user logs in,
> and then starts that file as the only application the user is
> allowed to run.
>
> here is the situation...
>
> i have an access application that we are running on a terminal
> server using a thin client setup. currently all users use the
> same access frontend located in a specific folder. this works,
> but makes updating that frontend a pain. i have to kick everyone
> out to do it. this application frontend should be copied to
> thier user account into thier terminal service profile. however
> with the amount of users doing this manually would take way to
> much time.
>
> what i would like is to have a login system in place that finds
> the frontend file and copies it to the users desktop in thier
> terminal server profile. then starts that file and is the only
> file that they can run. having the client frontend the only
> thing they can run is already working, but the copying of the
> file to every users frontend part is something i have no idea
> how to accomplish.
>
> the other thing i wonder about is if i have a logon script that
> copies the file everytime to the users profile would that cause
> a problem with the frontend being the only thing allowed to run
> at start up?
>
> i hope this makes some sense... i havent a lot of experience
> with terminal services and if someone could help me walk through
> this it would be greatly appreciated.
 
Re: Help with a configuration of profiles

Hello Vera

so i would make a batch file with those commands?

i have it set that on the enviroment tab it starts the frontend, but where
would i put the login script? can i do it for a group of users, or does it
have to be individually per user?

we tried a test logon script in the profile - user profile - logon script
and it didnt seem to work.

do we need to put it some where else? these are all terminal server users so
is there a difference between loging on directly to the machine or
terminalling in? or would it use the profile set up regardless of how they
are loging in?

really new to trying to set up this kind of thing, thanks for any and all
help. :)

"Vera Noest [MVP]" wrote:

> You can do the copying in your logon script, and define the
> frontend as the starting application in TS Configuration.
> Or define a new command file as the starting application, and do
> both the copying and execution of the frontend there. Something
> like:
>
> copy \\server\share\frontend.exe %userprofile%\Desktop
> start /wait %userprofile%\Desktop\frontend.exe
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in
> microsoft.public.windows.terminal_services:
>
> > Hello All
> >
> > i am trying to set up a system for my terminal server, that
> > would copy a file from a specific location as the user logs in,
> > and then starts that file as the only application the user is
> > allowed to run.
> >
> > here is the situation...
> >
> > i have an access application that we are running on a terminal
> > server using a thin client setup. currently all users use the
> > same access frontend located in a specific folder. this works,
> > but makes updating that frontend a pain. i have to kick everyone
> > out to do it. this application frontend should be copied to
> > thier user account into thier terminal service profile. however
> > with the amount of users doing this manually would take way to
> > much time.
> >
> > what i would like is to have a login system in place that finds
> > the frontend file and copies it to the users desktop in thier
> > terminal server profile. then starts that file and is the only
> > file that they can run. having the client frontend the only
> > thing they can run is already working, but the copying of the
> > file to every users frontend part is something i have no idea
> > how to accomplish.
> >
> > the other thing i wonder about is if i have a logon script that
> > copies the file everytime to the users profile would that cause
> > a problem with the frontend being the only thing allowed to run
> > at start up?
> >
> > i hope this makes some sense... i havent a lot of experience
> > with terminal services and if someone could help me walk through
> > this it would be greatly appreciated.
>
 
Re: Help with a configuration of profiles

I assume that you are talking about the user's TS-specific profile,
and not their normal profile?
Where and how exactly did you try to define the logon script?

There are many ways to define a logon script for all users on a TS.
Probably the easiest way is to define a logon script in a GPO
linked to the OU which contains the Terminal Server:

User Configuration - Windows Settings - Scripts
Logon

And since this is a user setting, you also have to use loopback
processing of the GPO:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

Note that if you start the frontend in the environment tab of the
user account, you should only put the copy command in the logon
script.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?RGF3blRyZWFkZXI=?=
<DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in
microsoft.public.windows.terminal_services:

> Hello Vera
>
> so i would make a batch file with those commands?
>
> i have it set that on the enviroment tab it starts the
> frontend, but where would i put the login script? can i do it
> for a group of users, or does it have to be individually per
> user?
>
> we tried a test logon script in the profile - user profile -
> logon script and it didnt seem to work.
>
> do we need to put it some where else? these are all terminal
> server users so is there a difference between loging on directly
> to the machine or terminalling in? or would it use the profile
> set up regardless of how they are loging in?
>
> really new to trying to set up this kind of thing, thanks for
> any and all help. :)
>
> "Vera Noest [MVP]" wrote:
>
>> You can do the copying in your logon script, and define the
>> frontend as the starting application in TS Configuration.
>> Or define a new command file as the starting application, and
>> do both the copying and execution of the frontend there.
>> Something like:
>>
>> copy \\server\share\frontend.exe %userprofile%\Desktop
>> start /wait %userprofile%\Desktop\frontend.exe
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in
>> microsoft.public.windows.terminal_services:
>>
>> > Hello All
>> >
>> > i am trying to set up a system for my terminal server, that
>> > would copy a file from a specific location as the user logs
>> > in, and then starts that file as the only application the
>> > user is allowed to run.
>> >
>> > here is the situation...
>> >
>> > i have an access application that we are running on a
>> > terminal server using a thin client setup. currently all
>> > users use the same access frontend located in a specific
>> > folder. this works, but makes updating that frontend a pain.
>> > i have to kick everyone out to do it. this application
>> > frontend should be copied to thier user account into thier
>> > terminal service profile. however with the amount of users
>> > doing this manually would take way to much time.
>> >
>> > what i would like is to have a login system in place that
>> > finds the frontend file and copies it to the users desktop in
>> > thier terminal server profile. then starts that file and is
>> > the only file that they can run. having the client frontend
>> > the only thing they can run is already working, but the
>> > copying of the file to every users frontend part is something
>> > i have no idea how to accomplish.
>> >
>> > the other thing i wonder about is if i have a logon script
>> > that copies the file everytime to the users profile would
>> > that cause a problem with the frontend being the only thing
>> > allowed to run at start up?
>> >
>> > i hope this makes some sense... i havent a lot of experience
>> > with terminal services and if someone could help me walk
>> > through this it would be greatly appreciated.
 
Re: Help with a configuration of profiles

ok

we have a terminal server set up. the server is not on a domain. the only
thing it is used for is the terminal services and MS access. access is what
runs the front end of our database system that the users are logining in to.

rarely does anyone use the machine by standing at the keyboard for it, and
when they do it is to correct a problem with the users abilities to connect.
when i manage users i am usually remoting in myself.

currently all the users are using the same database file when they connect
to the frontend. this file is the file that i want to copy everytime they
login to thier profile and run it from there, rather than each user using the
same copy of the file in the same location. so far it works, but i just know
that things would be better if each user had thier own copy in thier profile.

we have users created for everyone who logs into the terminal server and
that users profile starts up the frontend everytime they log in. the settings
we have for that to happen are found by right clicking and manage on my
computer.

then under local users and groups we have our users. when i go to the
properties of one of those icons for the users and click the enviroment tab i
end up with a place to tell it to start a specific program. in there we have
it set to start access and to load the frontend file.

the reason i am explaining this is i have no idea what GPO, OU and loopback
processing mode is.

you are talking to someone who has little experience with servers in general
and once was responsible for crashing a windows 2000 server. :)

i really need to have a step by step and explaination of terms like GPO.

although i have a good guess at what GPO means, i could also be dead wrong. :)

"Vera Noest [MVP]" wrote:

> I assume that you are talking about the user's TS-specific profile,
> and not their normal profile?
> Where and how exactly did you try to define the logon script?
>
> There are many ways to define a logon script for all users on a TS.
> Probably the easiest way is to define a logon script in a GPO
> linked to the OU which contains the Terminal Server:
>
> User Configuration - Windows Settings - Scripts
> Logon
>
> And since this is a user setting, you also have to use loopback
> processing of the GPO:
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> Note that if you start the frontend in the environment tab of the
> user account, you should only put the copy command in the logon
> script.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in
> microsoft.public.windows.terminal_services:
>
> > Hello Vera
> >
> > so i would make a batch file with those commands?
> >
> > i have it set that on the enviroment tab it starts the
> > frontend, but where would i put the login script? can i do it
> > for a group of users, or does it have to be individually per
> > user?
> >
> > we tried a test logon script in the profile - user profile -
> > logon script and it didnt seem to work.
> >
> > do we need to put it some where else? these are all terminal
> > server users so is there a difference between loging on directly
> > to the machine or terminalling in? or would it use the profile
> > set up regardless of how they are loging in?
> >
> > really new to trying to set up this kind of thing, thanks for
> > any and all help. :)
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> You can do the copying in your logon script, and define the
> >> frontend as the starting application in TS Configuration.
> >> Or define a new command file as the starting application, and
> >> do both the copying and execution of the frontend there.
> >> Something like:
> >>
> >> copy \\server\share\frontend.exe %userprofile%\Desktop
> >> start /wait %userprofile%\Desktop\frontend.exe
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008 in
> >> microsoft.public.windows.terminal_services:
> >>
> >> > Hello All
> >> >
> >> > i am trying to set up a system for my terminal server, that
> >> > would copy a file from a specific location as the user logs
> >> > in, and then starts that file as the only application the
> >> > user is allowed to run.
> >> >
> >> > here is the situation...
> >> >
> >> > i have an access application that we are running on a
> >> > terminal server using a thin client setup. currently all
> >> > users use the same access frontend located in a specific
> >> > folder. this works, but makes updating that frontend a pain.
> >> > i have to kick everyone out to do it. this application
> >> > frontend should be copied to thier user account into thier
> >> > terminal service profile. however with the amount of users
> >> > doing this manually would take way to much time.
> >> >
> >> > what i would like is to have a login system in place that
> >> > finds the frontend file and copies it to the users desktop in
> >> > thier terminal server profile. then starts that file and is
> >> > the only file that they can run. having the client frontend
> >> > the only thing they can run is already working, but the
> >> > copying of the file to every users frontend part is something
> >> > i have no idea how to accomplish.
> >> >
> >> > the other thing i wonder about is if i have a logon script
> >> > that copies the file everytime to the users profile would
> >> > that cause a problem with the frontend being the only thing
> >> > allowed to run at start up?
> >> >
> >> > i hope this makes some sense... i havent a lot of experience
> >> > with terminal services and if someone could help me walk
> >> > through this it would be greatly appreciated.
>
 
Re: Help with a configuration of profiles

OK, I see.
I was assuming that the Terminal Server was a member server of the
domain, and that users logged on to the TS using their normal
domain user accounts.
I now understand that you have created local user accounts on the
TS.
In this scenario, GPOs (Group Policy Objects, or short Group
Policies) won't work, they are a domain thingy. There is also a
local policy on the Terminal Server, you can access and modify that
by running the "gpedit.msc" command, but it isn't as powerful and
flexible as domain-based GPOs.

I's not clear to me if there is a domain at all. Do the user's
client computers belong to a domain, and do they logon to the
clients with their domain accounts? If so, I would recommend to
make the TS also a member of the domain and skip the local
accounts. Much easier for the users, and much less administrative
overhead for you.

If there is currently no domain at all, then you'll have to stick
with your workgroup setup. It's not in the scope of this newsgroup
to give a step-by-step guide of how to create a domain, OU (=
Organisational Unit) and GPO structure.

You can keep your current setup as-is, and just create a .bat file
with the single line (change "server", "share" and "frontend.dbf"
to match the searchpath to the frontend file):
copy \\server\share\frontend.dbf %userprofile%\Desktop

And maybe the easiest way to execute this bat file automatically
for each user is by putting it in the Startup folder of each user's
profile on the Terminal Server. Not the best solution, but easiest
to explain.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?RGF3blRyZWFkZXI=?=
<DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in
microsoft.public.windows.terminal_services:

> ok
>
> we have a terminal server set up. the server is not on a domain.
> the only thing it is used for is the terminal services and MS
> access. access is what runs the front end of our database system
> that the users are logining in to.
>
> rarely does anyone use the machine by standing at the keyboard
> for it, and when they do it is to correct a problem with the
> users abilities to connect. when i manage users i am usually
> remoting in myself.
>
> currently all the users are using the same database file when
> they connect to the frontend. this file is the file that i want
> to copy everytime they login to thier profile and run it from
> there, rather than each user using the same copy of the file in
> the same location. so far it works, but i just know that things
> would be better if each user had thier own copy in thier
> profile.
>
> we have users created for everyone who logs into the terminal
> server and that users profile starts up the frontend everytime
> they log in. the settings we have for that to happen are found
> by right clicking and manage on my computer.
>
> then under local users and groups we have our users. when i go
> to the properties of one of those icons for the users and click
> the enviroment tab i end up with a place to tell it to start a
> specific program. in there we have it set to start access and to
> load the frontend file.
>
> the reason i am explaining this is i have no idea what GPO, OU
> and loopback processing mode is.
>
> you are talking to someone who has little experience with
> servers in general and once was responsible for crashing a
> windows 2000 server. :)
>
> i really need to have a step by step and explaination of terms
> like GPO.
>
> although i have a good guess at what GPO means, i could also be
> dead wrong. :)
>
> "Vera Noest [MVP]" wrote:
>
>> I assume that you are talking about the user's TS-specific
>> profile, and not their normal profile?
>> Where and how exactly did you try to define the logon script?
>>
>> There are many ways to define a logon script for all users on a
>> TS. Probably the easiest way is to define a logon script in a
>> GPO linked to the OU which contains the Terminal Server:
>>
>> User Configuration - Windows Settings - Scripts
>> Logon
>>
>> And since this is a user setting, you also have to use loopback
>> processing of the GPO:
>>
>> Computer Configuration - Administrative Templates - System -
>> Group Policy
>> "User Group Policy loopback processing mode" - "Replace"
>>
>> Note that if you start the frontend in the environment tab of
>> the user account, you should only put the copy command in the
>> logon script.
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in
>> microsoft.public.windows.terminal_services:
>>
>> > Hello Vera
>> >
>> > so i would make a batch file with those commands?
>> >
>> > i have it set that on the enviroment tab it starts the
>> > frontend, but where would i put the login script? can i do it
>> > for a group of users, or does it have to be individually per
>> > user?
>> >
>> > we tried a test logon script in the profile - user profile -
>> > logon script and it didnt seem to work.
>> >
>> > do we need to put it some where else? these are all terminal
>> > server users so is there a difference between loging on
>> > directly to the machine or terminalling in? or would it use
>> > the profile set up regardless of how they are loging in?
>> >
>> > really new to trying to set up this kind of thing, thanks for
>> > any and all help. :)
>> >
>> > "Vera Noest [MVP]" wrote:
>> >
>> >> You can do the copying in your logon script, and define the
>> >> frontend as the starting application in TS Configuration.
>> >> Or define a new command file as the starting application,
>> >> and do both the copying and execution of the frontend there.
>> >> Something like:
>> >>
>> >> copy \\server\share\frontend.exe %userprofile%\Desktop
>> >> start /wait %userprofile%\Desktop\frontend.exe
>> >> _________________________________________________________
>> >> Vera Noest
>> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> TS troubleshooting: http://ts.veranoest.net
>> >> ___ please respond in newsgroup, NOT by private email ___
>> >>
>> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008
>> >> in microsoft.public.windows.terminal_services:
>> >>
>> >> > Hello All
>> >> >
>> >> > i am trying to set up a system for my terminal server,
>> >> > that would copy a file from a specific location as the
>> >> > user logs in, and then starts that file as the only
>> >> > application the user is allowed to run.
>> >> >
>> >> > here is the situation...
>> >> >
>> >> > i have an access application that we are running on a
>> >> > terminal server using a thin client setup. currently all
>> >> > users use the same access frontend located in a specific
>> >> > folder. this works, but makes updating that frontend a
>> >> > pain. i have to kick everyone out to do it. this
>> >> > application frontend should be copied to thier user
>> >> > account into thier terminal service profile. however with
>> >> > the amount of users doing this manually would take way to
>> >> > much time.
>> >> >
>> >> > what i would like is to have a login system in place that
>> >> > finds the frontend file and copies it to the users desktop
>> >> > in thier terminal server profile. then starts that file
>> >> > and is the only file that they can run. having the client
>> >> > frontend the only thing they can run is already working,
>> >> > but the copying of the file to every users frontend part
>> >> > is something i have no idea how to accomplish.
>> >> >
>> >> > the other thing i wonder about is if i have a logon script
>> >> > that copies the file everytime to the users profile would
>> >> > that cause a problem with the frontend being the only
>> >> > thing allowed to run at start up?
>> >> >
>> >> > i hope this makes some sense... i havent a lot of
>> >> > experience with terminal services and if someone could
>> >> > help me walk through this it would be greatly appreciated.
 
Re: Help with a configuration of profiles

Hello Vera

first i want to thank you for your help, you are the most on the ball person
who has ever helped me on this site.

you are correct, this server is stand alone. again we use it as a portal to
the db client that we have set up. we keep it off the domain as a security
measure. i followed a few of the things you wrote about to see what i could
find. i went in to the gpedit.msc and that helped immensly, i now have an
idea of where i need to make the changes i want to make.

i tried making a file that would start on login, the IT manager said to name
it default.cmd. in it we did a little test, "echo hello", "pause". it didnt
work. but then we never went to the gpedit.msc and added it to the "scripts
(logon/logoff)" configuration setup i found.

should i make it a .bat file? and should i add it to the properties window i
find when i right click, properties on the "scripts (logon/logoff)" i found?
understand that i want to be careful, i dont want to cause a problem on this
server because of the nature of the set up. so i wont do anything without
knowing from someone somewhere that i should. even though i think this is
where and what i should be doing, i dont plan on killing another server.

if i put the .bat in the startup would that cause it to fire before the
setting for the users to start a program upon connection? or do i need it to
be somewhere else for that?

again thanks for all your help. :)

"Vera Noest [MVP]" wrote:

> OK, I see.
> I was assuming that the Terminal Server was a member server of the
> domain, and that users logged on to the TS using their normal
> domain user accounts.
> I now understand that you have created local user accounts on the
> TS.
> In this scenario, GPOs (Group Policy Objects, or short Group
> Policies) won't work, they are a domain thingy. There is also a
> local policy on the Terminal Server, you can access and modify that
> by running the "gpedit.msc" command, but it isn't as powerful and
> flexible as domain-based GPOs.
>
> I's not clear to me if there is a domain at all. Do the user's
> client computers belong to a domain, and do they logon to the
> clients with their domain accounts? If so, I would recommend to
> make the TS also a member of the domain and skip the local
> accounts. Much easier for the users, and much less administrative
> overhead for you.
>
> If there is currently no domain at all, then you'll have to stick
> with your workgroup setup. It's not in the scope of this newsgroup
> to give a step-by-step guide of how to create a domain, OU (=
> Organisational Unit) and GPO structure.
>
> You can keep your current setup as-is, and just create a .bat file
> with the single line (change "server", "share" and "frontend.dbf"
> to match the searchpath to the frontend file):
> copy \\server\share\frontend.dbf %userprofile%\Desktop
>
> And maybe the easiest way to execute this bat file automatically
> for each user is by putting it in the Startup folder of each user's
> profile on the Terminal Server. Not the best solution, but easiest
> to explain.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> <DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in
> microsoft.public.windows.terminal_services:
>
> > ok
> >
> > we have a terminal server set up. the server is not on a domain.
> > the only thing it is used for is the terminal services and MS
> > access. access is what runs the front end of our database system
> > that the users are logining in to.
> >
> > rarely does anyone use the machine by standing at the keyboard
> > for it, and when they do it is to correct a problem with the
> > users abilities to connect. when i manage users i am usually
> > remoting in myself.
> >
> > currently all the users are using the same database file when
> > they connect to the frontend. this file is the file that i want
> > to copy everytime they login to thier profile and run it from
> > there, rather than each user using the same copy of the file in
> > the same location. so far it works, but i just know that things
> > would be better if each user had thier own copy in thier
> > profile.
> >
> > we have users created for everyone who logs into the terminal
> > server and that users profile starts up the frontend everytime
> > they log in. the settings we have for that to happen are found
> > by right clicking and manage on my computer.
> >
> > then under local users and groups we have our users. when i go
> > to the properties of one of those icons for the users and click
> > the enviroment tab i end up with a place to tell it to start a
> > specific program. in there we have it set to start access and to
> > load the frontend file.
> >
> > the reason i am explaining this is i have no idea what GPO, OU
> > and loopback processing mode is.
> >
> > you are talking to someone who has little experience with
> > servers in general and once was responsible for crashing a
> > windows 2000 server. :)
> >
> > i really need to have a step by step and explaination of terms
> > like GPO.
> >
> > although i have a good guess at what GPO means, i could also be
> > dead wrong. :)
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> I assume that you are talking about the user's TS-specific
> >> profile, and not their normal profile?
> >> Where and how exactly did you try to define the logon script?
> >>
> >> There are many ways to define a logon script for all users on a
> >> TS. Probably the easiest way is to define a logon script in a
> >> GPO linked to the OU which contains the Terminal Server:
> >>
> >> User Configuration - Windows Settings - Scripts
> >> Logon
> >>
> >> And since this is a user setting, you also have to use loopback
> >> processing of the GPO:
> >>
> >> Computer Configuration - Administrative Templates - System -
> >> Group Policy
> >> "User Group Policy loopback processing mode" - "Replace"
> >>
> >> Note that if you start the frontend in the environment tab of
> >> the user account, you should only put the copy command in the
> >> logon script.
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> >> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008 in
> >> microsoft.public.windows.terminal_services:
> >>
> >> > Hello Vera
> >> >
> >> > so i would make a batch file with those commands?
> >> >
> >> > i have it set that on the enviroment tab it starts the
> >> > frontend, but where would i put the login script? can i do it
> >> > for a group of users, or does it have to be individually per
> >> > user?
> >> >
> >> > we tried a test logon script in the profile - user profile -
> >> > logon script and it didnt seem to work.
> >> >
> >> > do we need to put it some where else? these are all terminal
> >> > server users so is there a difference between loging on
> >> > directly to the machine or terminalling in? or would it use
> >> > the profile set up regardless of how they are loging in?
> >> >
> >> > really new to trying to set up this kind of thing, thanks for
> >> > any and all help. :)
> >> >
> >> > "Vera Noest [MVP]" wrote:
> >> >
> >> >> You can do the copying in your logon script, and define the
> >> >> frontend as the starting application in TS Configuration.
> >> >> Or define a new command file as the starting application,
> >> >> and do both the copying and execution of the frontend there.
> >> >> Something like:
> >> >>
> >> >> copy \\server\share\frontend.exe %userprofile%\Desktop
> >> >> start /wait %userprofile%\Desktop\frontend.exe
> >> >> _________________________________________________________
> >> >> Vera Noest
> >> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> >> TS troubleshooting: http://ts.veranoest.net
> >> >> ___ please respond in newsgroup, NOT by private email ___
> >> >>
> >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
> >> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun 2008
> >> >> in microsoft.public.windows.terminal_services:
> >> >>
> >> >> > Hello All
> >> >> >
> >> >> > i am trying to set up a system for my terminal server,
> >> >> > that would copy a file from a specific location as the
> >> >> > user logs in, and then starts that file as the only
> >> >> > application the user is allowed to run.
> >> >> >
> >> >> > here is the situation...
> >> >> >
> >> >> > i have an access application that we are running on a
> >> >> > terminal server using a thin client setup. currently all
> >> >> > users use the same access frontend located in a specific
> >> >> > folder. this works, but makes updating that frontend a
> >> >> > pain. i have to kick everyone out to do it. this
> >> >> > application frontend should be copied to thier user
> >> >> > account into thier terminal service profile. however with
> >> >> > the amount of users doing this manually would take way to
> >> >> > much time.
> >> >> >
> >> >> > what i would like is to have a login system in place that
> >> >> > finds the frontend file and copies it to the users desktop
> >> >> > in thier terminal server profile. then starts that file
> >> >> > and is the only file that they can run. having the client
> >> >> > frontend the only thing they can run is already working,
> >> >> > but the copying of the file to every users frontend part
> >> >> > is something i have no idea how to accomplish.
> >> >> >
> >> >> > the other thing i wonder about is if i have a logon script
> >> >> > that copies the file everytime to the users profile would
> >> >> > that cause a problem with the frontend being the only
> >> >> > thing allowed to run at start up?
> >> >> >
> >> >> > i hope this makes some sense... i havent a lot of
> >> >> > experience with terminal services and if someone could
> >> >> > help me walk through this it would be greatly appreciated.
>
 
Re: Help with a configuration of profiles

Sorry for not getting back to you sooner, I've been away for a
short holiday.
It doesn't matter whether you call the file <something>.cmd or
<something>.bat, both are executable files and can do the same
thing.
And just creating the file doesn't execute it, you will have to
define it either as a logon script in the local policy of the
server, or put it in the users Startup folder.
Your IT manager should also be able to help you implement this.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?RGF3blRyZWFkZXI=?=
<DawnTreader@discussions.microsoft.com> wrote on 23 jun 2008 in
microsoft.public.windows.terminal_services:

> Hello Vera
>
> first i want to thank you for your help, you are the most on the
> ball person who has ever helped me on this site.
>
> you are correct, this server is stand alone. again we use it as
> a portal to the db client that we have set up. we keep it off
> the domain as a security measure. i followed a few of the things
> you wrote about to see what i could find. i went in to the
> gpedit.msc and that helped immensly, i now have an idea of where
> i need to make the changes i want to make.
>
> i tried making a file that would start on login, the IT manager
> said to name it default.cmd. in it we did a little test, "echo
> hello", "pause". it didnt work. but then we never went to the
> gpedit.msc and added it to the "scripts (logon/logoff)"
> configuration setup i found.
>
> should i make it a .bat file? and should i add it to the
> properties window i find when i right click, properties on the
> "scripts (logon/logoff)" i found? understand that i want to be
> careful, i dont want to cause a problem on this server because
> of the nature of the set up. so i wont do anything without
> knowing from someone somewhere that i should. even though i
> think this is where and what i should be doing, i dont plan on
> killing another server.
>
> if i put the .bat in the startup would that cause it to fire
> before the setting for the users to start a program upon
> connection? or do i need it to be somewhere else for that?
>
> again thanks for all your help. :)
>
> "Vera Noest [MVP]" wrote:
>
>> OK, I see.
>> I was assuming that the Terminal Server was a member server of
>> the domain, and that users logged on to the TS using their
>> normal domain user accounts.
>> I now understand that you have created local user accounts on
>> the TS.
>> In this scenario, GPOs (Group Policy Objects, or short Group
>> Policies) won't work, they are a domain thingy. There is also a
>> local policy on the Terminal Server, you can access and modify
>> that by running the "gpedit.msc" command, but it isn't as
>> powerful and flexible as domain-based GPOs.
>>
>> I's not clear to me if there is a domain at all. Do the user's
>> client computers belong to a domain, and do they logon to the
>> clients with their domain accounts? If so, I would recommend to
>> make the TS also a member of the domain and skip the local
>> accounts. Much easier for the users, and much less
>> administrative overhead for you.
>>
>> If there is currently no domain at all, then you'll have to
>> stick with your workgroup setup. It's not in the scope of this
>> newsgroup to give a step-by-step guide of how to create a
>> domain, OU (= Organisational Unit) and GPO structure.
>>
>> You can keep your current setup as-is, and just create a .bat
>> file with the single line (change "server", "share" and
>> "frontend.dbf" to match the searchpath to the frontend file):
>> copy \\server\share\frontend.dbf %userprofile%\Desktop
>>
>> And maybe the easiest way to execute this bat file
>> automatically for each user is by putting it in the Startup
>> folder of each user's profile on the Terminal Server. Not the
>> best solution, but easiest to explain.
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> <DawnTreader@discussions.microsoft.com> wrote on 22 jun 2008 in
>> microsoft.public.windows.terminal_services:
>>
>> > ok
>> >
>> > we have a terminal server set up. the server is not on a
>> > domain. the only thing it is used for is the terminal
>> > services and MS access. access is what runs the front end of
>> > our database system that the users are logining in to.
>> >
>> > rarely does anyone use the machine by standing at the
>> > keyboard for it, and when they do it is to correct a problem
>> > with the users abilities to connect. when i manage users i am
>> > usually remoting in myself.
>> >
>> > currently all the users are using the same database file when
>> > they connect to the frontend. this file is the file that i
>> > want to copy everytime they login to thier profile and run it
>> > from there, rather than each user using the same copy of the
>> > file in the same location. so far it works, but i just know
>> > that things would be better if each user had thier own copy
>> > in thier profile.
>> >
>> > we have users created for everyone who logs into the terminal
>> > server and that users profile starts up the frontend
>> > everytime they log in. the settings we have for that to
>> > happen are found by right clicking and manage on my computer.
>> >
>> > then under local users and groups we have our users. when i
>> > go to the properties of one of those icons for the users and
>> > click the enviroment tab i end up with a place to tell it to
>> > start a specific program. in there we have it set to start
>> > access and to load the frontend file.
>> >
>> > the reason i am explaining this is i have no idea what GPO,
>> > OU and loopback processing mode is.
>> >
>> > you are talking to someone who has little experience with
>> > servers in general and once was responsible for crashing a
>> > windows 2000 server. :)
>> >
>> > i really need to have a step by step and explaination of
>> > terms like GPO.
>> >
>> > although i have a good guess at what GPO means, i could also
>> > be dead wrong. :)
>> >
>> > "Vera Noest [MVP]" wrote:
>> >
>> >> I assume that you are talking about the user's TS-specific
>> >> profile, and not their normal profile?
>> >> Where and how exactly did you try to define the logon
>> >> script?
>> >>
>> >> There are many ways to define a logon script for all users
>> >> on a TS. Probably the easiest way is to define a logon
>> >> script in a GPO linked to the OU which contains the Terminal
>> >> Server:
>> >>
>> >> User Configuration - Windows Settings - Scripts
>> >> Logon
>> >>
>> >> And since this is a user setting, you also have to use
>> >> loopback processing of the GPO:
>> >>
>> >> Computer Configuration - Administrative Templates - System -
>> >> Group Policy
>> >> "User Group Policy loopback processing mode" - "Replace"
>> >>
>> >> Note that if you start the frontend in the environment tab
>> >> of the user account, you should only put the copy command in
>> >> the logon script.
>> >> _________________________________________________________
>> >> Vera Noest
>> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> TS troubleshooting: http://ts.veranoest.net
>> >> ___ please respond in newsgroup, NOT by private email ___
>> >>
>> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> >> <DawnTreader@discussions.microsoft.com> wrote on 21 jun 2008
>> >> in microsoft.public.windows.terminal_services:
>> >>
>> >> > Hello Vera
>> >> >
>> >> > so i would make a batch file with those commands?
>> >> >
>> >> > i have it set that on the enviroment tab it starts the
>> >> > frontend, but where would i put the login script? can i do
>> >> > it for a group of users, or does it have to be
>> >> > individually per user?
>> >> >
>> >> > we tried a test logon script in the profile - user profile
>> >> > - logon script and it didnt seem to work.
>> >> >
>> >> > do we need to put it some where else? these are all
>> >> > terminal server users so is there a difference between
>> >> > loging on directly to the machine or terminalling in? or
>> >> > would it use the profile set up regardless of how they are
>> >> > loging in?
>> >> >
>> >> > really new to trying to set up this kind of thing, thanks
>> >> > for any and all help. :)
>> >> >
>> >> > "Vera Noest [MVP]" wrote:
>> >> >
>> >> >> You can do the copying in your logon script, and define
>> >> >> the frontend as the starting application in TS
>> >> >> Configuration. Or define a new command file as the
>> >> >> starting application, and do both the copying and
>> >> >> execution of the frontend there. Something like:
>> >> >>
>> >> >> copy \\server\share\frontend.exe %userprofile%\Desktop
>> >> >> start /wait %userprofile%\Desktop\frontend.exe
>> >> >> _________________________________________________________
>> >> >> Vera Noest
>> >> >> MCSE, CCEA, Microsoft MVP - Terminal Server
>> >> >> TS troubleshooting: http://ts.veranoest.net
>> >> >> ___ please respond in newsgroup, NOT by private email ___
>> >> >>
>> >> >> =?Utf-8?B?RGF3blRyZWFkZXI=?=
>> >> >> <DawnTreader@discussions.microsoft.com> wrote on 20 jun
>> >> >> 2008 in microsoft.public.windows.terminal_services:
>> >> >>
>> >> >> > Hello All
>> >> >> >
>> >> >> > i am trying to set up a system for my terminal server,
>> >> >> > that would copy a file from a specific location as the
>> >> >> > user logs in, and then starts that file as the only
>> >> >> > application the user is allowed to run.
>> >> >> >
>> >> >> > here is the situation...
>> >> >> >
>> >> >> > i have an access application that we are running on a
>> >> >> > terminal server using a thin client setup. currently
>> >> >> > all users use the same access frontend located in a
>> >> >> > specific folder. this works, but makes updating that
>> >> >> > frontend a pain. i have to kick everyone out to do it.
>> >> >> > this application frontend should be copied to thier
>> >> >> > user account into thier terminal service profile.
>> >> >> > however with the amount of users doing this manually
>> >> >> > would take way to much time.
>> >> >> >
>> >> >> > what i would like is to have a login system in place
>> >> >> > that finds the frontend file and copies it to the users
>> >> >> > desktop in thier terminal server profile. then starts
>> >> >> > that file and is the only file that they can run.
>> >> >> > having the client frontend the only thing they can run
>> >> >> > is already working, but the copying of the file to
>> >> >> > every users frontend part is something i have no idea
>> >> >> > how to accomplish.
>> >> >> >
>> >> >> > the other thing i wonder about is if i have a logon
>> >> >> > script that copies the file everytime to the users
>> >> >> > profile would that cause a problem with the frontend
>> >> >> > being the only thing allowed to run at start up?
>> >> >> >
>> >> >> > i hope this makes some sense... i havent a lot of
>> >> >> > experience with terminal services and if someone could
>> >> >> > help me walk through this it would be greatly
>> >> >> > appreciated.
 
Back
Top