Patch the customer using the Group Policy in the Domain Controller

Group PolicyIs very powerful, the following is a detailed description of the Group Policy Application Skills.

The emergence of group policies makes it easy to modify many old registry policies. I don't want to explain what a group policy is. You can run "GPEDIT. MSC.

In addition, group policies are widely used in the network. For example, when you need to install a software or modify a setting for the network client, group policies can help you easily deal with them. However, the premise is that your network server has been upgradedDomain Controller. You only need to set the Group Policy in the domain controller to apply the policy to all clients in the domain. The domain name in this article is "AD. EXAMPLE. MICROSOFT. COM ".

Domain Controller settings

1. Run "DSA. MSC" on the domain controller to open the "Active Directory user and computer" window.

2. Right-click the domain name "AD. EXAMPLE. MICROSOFT. COM" and select "properties"

3. In the pop-up dialog box, click the "Group Policy" tab. The list shows the configured policies. You can modify these policies or create a new one.

4. Click "new" and modify the name, as shown in "install"

5. Select the Group Policy and click "edit". Then, the Group Policy setting window is displayed.

Note:

The configuration of this group policy is the same as that of the Group Policy on the single machine. Because software is installed on the client, you need to use the logon script in the group policy to implement the policy.

However, before setting the Group Policy, you must prepare the script file,

1. Open notepad, enter "start/wait \ 192.168.0.1 \ hotfix \ chaqq.exe", and save it as "C: \ ADFILE \ INSTALL. BAT"

2. Copy the program chaqq.exe to the C: \ ADFILE folder. If you need to INSTALL multiple programs, append them to the batch file INSTALL. BAT.

Note:

Do not remove "/wait". Otherwise, these programs will be installed at the same time. This parameter is added to allow the program to be installed one by one.

3. After creating a batch file, set the "C: \ ADFILE" folder to share the file. Do not change the sharing name.

4. Return to the Group Policy settings window, expand "user settings> Windows Settings> script-(logon/logout)", and double-click "Logon" in the window on the right"

5. In the displayed dialog box, press "add> browse" and select the "INSTALL. BAT" file.

Note:

Some tips are required to select a batch file. You cannot directly select the file in the "C: \ ADFILE" folder. Instead, you need to select the batch file through the network neighbor, the reason is that the client accesses this file through the network. Therefore, you need to change the path of this batch file to the network path. You can select this file in this way, enter \ 192.168.0.1 in the browser box (if the IP address of the domain controller is 192.168.0.1), and click "INSTALL" in the "ADFILE" folder. BAT ",

6. Click "OK" to set the Group Policy.

If the client has not been added to the domain, add it as follows:

1. In the "my computer" property box, click "properties" on the "Network ID" tab.

2. Select the "Domain" option under "affiliated. The text box is activated.

3. Enter the domain of your network in the text box (the domain in this article is "AD. EXAMPLE. MICROSOFT. COM"), and then press "OK"

4. The "DNS address" of the NIC attribute has been set as the IP address of the domain controller. A dialog box will pop up asking you to enter the user name and password of the region domain.

5. the username entered here must be created on the domain controller and added to the "Account Operators" group.

6. Do not forget to create a new computer account on the domain controller. Only in this way can you use this user name to add the client to the domain.

7. Fill in the account name and password, and click "OK". The prompt "welcome to join the domain" appears, indicating that this client is already a domain member.

When the client logs on to the system next time, it will find that the domain option is added to the logon box. Select a domain in this option (this article is "AD. EXAMPLE. MICROSOFT. COM), and then enter the corresponding user name and password in the user name and password boxes.

After the verification is passed, the client installs the corresponding program to the system based on the program list specified in the batch file. Of course, you still need to select the installation path and other related operations when installing these programs.

After these programs are installed on the client, do not forget to delete the Group Policy in the domain controller. Otherwise, the client will automatically call these installers upon next login. The above only applies the "Logon script" policy in the Group Policy, but you need to know that you only need to set all the policies to be modified in the Group Policy, all clients that log on to this domain can apply these policies.

If you use the method described in this article to install the system patch for the client, the account that the client logs on to the domain must have the administrator privilege to install the system patch.

Tip: all operations in this article are logged on as administrators. The operating system of the domain controller is Windows Server 2003, and the operating system of the client is Windows 2000 Professional.

It is hoped that the method of applying patches to customers using the Group Policy in the domain controller in this article will be helpful to readers. More knowledge about group policies needs to be learned and consolidated by readers.