Configure the Windows logon scripts to run

Before you begin

You can configure your logon script to run with a group policy on Active Directory 2016, 2012, or 2008. Note that earlier versions of Active Directory have not been certified with this product version.

Note: The following procedures are specific to Microsoft operating systems and are provided here as a courtesy. Forcepoint cannot be responsible for changes to these procedures or to the operating systems that employ them. For more information, see the links provided.

Before beginning, make sure your environment meets the conditions described in Prerequisites for running the Windows logon script.

Steps

  1. Open the Group Policy Management console.
  2. Expand the Domains tree, right-click a domain or OU name, and select Create a GPO in this domain and Link it here.
  3. In the New GPO dialog box, give the GPO a descriptive name, then click OK.
  4. Locate the new GPO in the Domains tree (under the domain or OU that you selected above), right-click it, and select Edit.
    If a pop-up message appears when you click on the GPO name, click OK.
  5. In the Group Policy Management Editor, navigate to User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff), then double-click Logon in the right pane.
  6. In the Logon Properties window, click Show Files.
    A folder whose name ends in User\Scripts\Logon\ is displayed.
  7. Copy two files into this folder: your logon script (for example, Logon.bat) and the version of the LogonApp.exe file that you want to run (32-bit or 64-bit).
  8. In the Logon Properties window, click Add.
  9. Click Browse to open the logon script directory, then select your logon script file and click OK.
  10. Verify that the logon script now appears in the list on the Logon Properties window, then click OK.
  11. (Optional) If you are also using a logoff script, repeat steps 5 through 9. This time, double-click Logoff at Step 5 and copy your logoff batch file into the folder that opens.
  12. Close the Group Policy Management Editor window for your GPO, then close the Group Policy Management window.

Next steps

Repeat this procedure on each domain controller in your network, as needed.