1 00:00:03,080 --> 00:00:03,700 Okay. 2 00:00:03,740 --> 00:00:06,020 So now let's deploy a startup script. 3 00:00:07,000 --> 00:00:11,800 So I've got a GPO called Scripts Policy, and I'm going to go ahead and edit it. 4 00:00:12,740 --> 00:00:18,260 And go in under computer configuration policies, windows, settings, scripts and I'll double click 5 00:00:18,260 --> 00:00:18,890 start up. 6 00:00:19,820 --> 00:00:25,820 And if I go show files, I've got this log on that file that I created in a previous example. 7 00:00:26,840 --> 00:00:31,160 I'm going to go ahead and delete that since I'm creating a startup script here. 8 00:00:32,140 --> 00:00:37,270 Actually I can't deleted from this location, so I'll go ahead and go to the add button. 9 00:00:38,230 --> 00:00:42,160 I'm going to say browse and I can go ahead and delete it from here. 10 00:00:43,140 --> 00:00:48,960 Now I'm going to create a new script called Startup Dot Bat, and I'm just doing this within the Explorer 11 00:00:48,960 --> 00:00:50,910 browser because it's easy to do. 12 00:00:51,850 --> 00:00:55,800 I could go ahead and do this from within the Explorer if I wanted to. 13 00:00:55,810 --> 00:01:00,880 But the fact that it takes me right to the location in serviceable means it's easy for me to do this 14 00:01:00,880 --> 00:01:01,390 up here. 15 00:01:02,350 --> 00:01:07,090 Now what I'm going to do is I'm going to paste in a command and all this is doing is it's using the 16 00:01:07,090 --> 00:01:10,310 red dot XY command to add a value to the registry. 17 00:01:10,330 --> 00:01:16,000 Under HQ, I underscore local underscore machines, backslash software, backslash test app and the 18 00:01:16,000 --> 00:01:17,560 value is called enabled. 19 00:01:17,560 --> 00:01:21,190 And I'm setting it to one with the type of reg underscore D word. 20 00:01:22,130 --> 00:01:28,160 And this is a good example because ordinarily a regular user would not be able to make a modification 21 00:01:28,160 --> 00:01:29,020 to HQ. 22 00:01:29,060 --> 00:01:31,250 I underscore local underscore machine. 23 00:01:32,210 --> 00:01:34,190 They're permissioned away from that. 24 00:01:35,190 --> 00:01:38,130 So I'm going to go ahead and save this batch file. 25 00:01:39,080 --> 00:01:42,530 And then I'm going to select it by clicking open here. 26 00:01:43,490 --> 00:01:46,220 And you'll see I've selected start up dot bat. 27 00:01:47,220 --> 00:01:52,980 I don't have any script parameters on this particular script, but I could use that if I needed to. 28 00:01:53,850 --> 00:01:55,560 So I've got my script. 29 00:01:55,650 --> 00:01:57,840 I'm going to go ahead and click Apply. 30 00:01:58,780 --> 00:02:04,270 And now, because this is a promising policy, what I'm going to do is I'm going to come up to the marketing 31 00:02:04,270 --> 00:02:09,280 for you, which is where my computer account is, and I'm going to link that Scripps policy to the marketing. 32 00:02:09,280 --> 00:02:15,760 Oh, you were my computer account is remember it's per computer, so I need to do that execution that 33 00:02:15,760 --> 00:02:18,850 linking at the oh you that contains computer objects. 34 00:02:19,820 --> 00:02:20,330 Okay. 35 00:02:20,480 --> 00:02:25,250 So now what I'm going to do is I'm going to go to my Windows seven client and restart it. 36 00:02:26,210 --> 00:02:31,340 Remember, I need a restart in order for the machine to actually pick up the script. 37 00:02:32,320 --> 00:02:34,990 So I'm going to go ahead and do the restart. 38 00:02:35,960 --> 00:02:39,080 And we'll see what happens when the machine comes back up. 39 00:02:40,040 --> 00:02:42,500 Now my machine is coming back up. 40 00:02:43,490 --> 00:02:47,930 So we're going to go ahead and see if we can see the execution of that script. 41 00:02:48,940 --> 00:02:51,100 So it's applying computer settings. 42 00:02:52,050 --> 00:02:53,970 And now you saw it flash by. 43 00:02:54,000 --> 00:02:55,200 It applied scripts. 44 00:02:56,150 --> 00:03:01,550 Now I'm logging back on to the machine and I'm going to go ahead and verify that I received that script's 45 00:03:01,550 --> 00:03:05,840 policy by checking the registry to see if my registry entry made it. 46 00:03:06,850 --> 00:03:10,050 So I'm going to go ahead into the registry editor. 47 00:03:11,030 --> 00:03:17,180 And if I come in under HQ, underscore local underscore machine software there's my test app key set 48 00:03:17,180 --> 00:03:20,150 to enabled with the value of enabled is set to one. 49 00:03:21,130 --> 00:03:23,020 So my script was delivered. 50 00:03:24,000 --> 00:03:29,730 Now remember I mentioned that you can use our soapie to get validation of some of this information. 51 00:03:30,660 --> 00:03:35,550 Let's go back to my server and I'm going to show you a little sneak peek of what we're going to be talking 52 00:03:35,550 --> 00:03:38,220 about in a later module around troubleshooting. 53 00:03:39,150 --> 00:03:42,360 I'm going to go into the group policy results wizard. 54 00:03:43,320 --> 00:03:49,110 And I'm going to collect against the Win7 client that I have in my domain that I just delivered a startup 55 00:03:49,110 --> 00:03:49,800 script to. 56 00:03:50,680 --> 00:03:53,620 And I'm going to say don't display user settings. 57 00:03:53,740 --> 00:03:56,110 I'm just interested in the computer settings. 58 00:03:57,050 --> 00:03:58,970 And once that report runs. 59 00:03:59,950 --> 00:04:05,770 We'll go into details and we'll go down to Settings Startup and you'll see the last runtime is listed 60 00:04:05,770 --> 00:04:06,160 here. 61 00:04:06,160 --> 00:04:11,350 And so that tells me that the script actually ran and it was delivered by the scripts policy. 62 00:04:12,330 --> 00:04:18,300 So I've got the capability of delivering startup scripts that can make changes to the system that users 63 00:04:18,300 --> 00:04:19,020 can't make. 64 00:04:19,960 --> 00:04:25,780 And I can verify that those are at least being delivered using results set of policy or group policy 65 00:04:25,780 --> 00:04:26,380 results.