Manual policy deployment automation - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Manual policy deployment automation

Page 1 of 1

1

Topic Options

#119141 - 2004-05-06 04:55 PM Manual policy deployment automation
burnsc burnsc Starting to like KiXtart Registered: 2004-04-14 Posts: 171	Any ides on how to automate policy deployment? Corporate will not let me put the policy file on our winlogon of the DC now because our plant is not the only plant on the domain now. Manual policy deployment to 300+ machines would be very time consumeing. Not to mention when a policy changes. I thought of creating a file using net view, editing out the machines that are not ours. Using that as a sourcefile for sendkeys automation to the poledit.exe. This is very kludgy though. As well as it not being a real good solution. Any other ideas?
Top

#119142 - 2004-05-06 05:50 PM Re: Manual policy deployment automation
Radimus Radimus Moderator Registered: 2000-01-06 Posts: 5187 Loc: Tampa, FL	do it remotely... make a control file with the PC names you want to modify then use RemoteExec() to execute the commands remotely or you can just modify the registry remotely _________________________ How to ask questions the smart way <-----------> Before you ask
Top

#119143 - 2004-05-06 06:00 PM Re: Manual policy deployment automation
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	You could put the .POL file in a subdir under NetLogon and configure just the clients you want for "Manual" instead. Is is just a reg hack to make it manual. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#119144 - 2004-05-06 06:18 PM Re: Manual policy deployment automation
burnsc burnsc Starting to like KiXtart Registered: 2004-04-14 Posts: 171	What is that registry hack, and does it include a full path to the pol file (I may be able to place that file on our local file print server.)
Top

#119145 - 2004-05-06 07:53 PM Re: Manual policy deployment automation
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	I am on AD and don't use NT4-styule policies anymore. If you spark up PolEdit, it has the option to modify the reg. Just pay attention to what it modifies. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#119146 - 2004-05-06 08:04 PM Re: Manual policy deployment automation
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	AH, what the heck... only takes a minute to google for the answer... http://www.thethin.net/faqs2.cfm?id=73&category=2&sortby=date _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#119147 - 2004-05-06 08:14 PM Re: Manual policy deployment automation
burnsc burnsc Starting to like KiXtart Registered: 2004-04-14 Posts: 171	I thought it actually made the changes on the remote machine directly from the policy editor itself. I could always do the settings in a kix exe to hide the registry settings from our users here. I guess I am just wanting to use the policy editor to hide me from having to actually parse the .adm files in my head. I was kind of hopeing that somehow that was one of the tidbits from the nt days left in your head.
Top

#119148 - 2004-05-06 08:33 PM Re: Manual policy deployment automation
burnsc burnsc Starting to like KiXtart Registered: 2004-04-14 Posts: 171	Thanks for this link. (BTW, what did you search for ) I had been looking for a way to do this for weeks. I even googled looking for it. This article at least tells me that I can not do exactly what I was wanting to do . What I wanted to do was apply policies based on the domain group from a nondomain PDC netlogon share (the share could have been named whatever). There is a way I could "emulate" it by looking at this article, but it would have a VERY HIGH upkeep cost (just like the first method I was looking at). Just to throw a question in, Does AD policies have to be deployed from the netlogon share of the PDC? If so this is probably going to shoot my future plans in the foot too.
Top

#119149 - 2004-05-06 08:48 PM Re: Manual policy deployment automation
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	If your hands are being tied a little by Corporate then I think the best solution is to do as Radimus suggests until such a time as you go to AD or Corp allows you to do it another way. Using an account that has local adminstrative rights (Domain Admin or similar) then using a text file or .INI file that contains all of the systems you want to manage. Then setup all the registry values you want or need (that is all policies are mainly anyways) then run a remote script against them. Ping the system or other to confirm it is online, then modify. Once the script is working well just schedule it to run everyday looking for these clients and updating them.
Top

#119150 - 2004-05-06 08:50 PM Re: Manual policy deployment automation
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	I have no idea what you had in mind... Placing the NTCONFIG.POL file in a subdir and setting the path as manual, is identical to placing it in NetLogon and leaving the clients on automatic. I presume you are wanting to implent the NT4-style policies because you are on an NT4 domain and possibly with Win9x and NT4 clients. In AD, the GPOs are stored on SysVol and not in \NetLogon and they only work on W2K/XP/W2K3. THere is no support for Wintendo or NT4. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#119151 - 2004-05-06 09:23 PM Re: Manual policy deployment automation
burnsc burnsc Starting to like KiXtart Registered: 2004-04-14 Posts: 171	I thought the 'manual' meant that I needed to initiate the download on each machine. If not then that IS what I want and I was misinterpretting the documentation. Basicly, I want my pol file on my custom share. I also want it updated to the local computer on reboot or relogon. Either one would work. Would manual make this work?
Top

#119152 - 2004-05-06 09:44 PM Re: Manual policy deployment automation
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Borrowing from the page... Quote: Note: If you don`t want to create a NETLOGON share, choose Manual (Use Specific Path) in the Update Mode box and type the path into the Path for Manual Update dialog box. In this case, you can name your policy anything you wish. This will write the path to the registry. Take note of what and where it is written. You can then use an admin script to update the reg on those machines you want to access the policy. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

1 registered (Henriques) and 2516 anonymous users online.

Newest Members

fgarcia, Viginette, ManuvdWielNL, Sir_Barrington, batdk82
17889 Registered Users

Generated in 0.071 seconds in which 0.034 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking