Enabling Windows logon scripts is a two-stage process. The first stage is to create the script itself, and the second stage is to assign the logon script to a domain user (or group) account.

I. Where to save the logon script:

1. Create your logon script and save it in the appropriate format (Example: logon.bat, logon.vbs).
2. Go to your domain controller and copy the script into the %SystemRoot%\SYSVOL\Sysvol\DomainName\Scripts local folder (Ex. C:\WINDOWS\sysvol\sysvol\ENTIIS.COM\SCRIPTS).

This folder corresponds to the domain controller’s NETLOGON network share folder.

This makes the script accessible over the network via the \\ServerName\Netlogon network share folder.

To summarize:
If your domain controller’s name “DC01”, and if you have a script named “logon.bat”, which is saved on DC01’s “C:\WINDOWS\sysvol\sysvol\ENTIIS.COM\SCRIPTS” folder, then you can access the script over the network by going to the “\\DC01\netlogon“ network share folder, or by simply running \\DC01\netlogon\logon.bat.

II. How to assign a logon script to a user or group:

1. First, open “Active Directory Users and Computers” on the domain controller.

2. Now right click on the user you want to have the logon script and select the properties menu.

A properties dialog like the one shown below will appear. Select the ‘Profile’ Tab

By default, if no exact network path is given, as shown in Figure 3, above, Active Directory will assume that the user profile logon script will be at the %SystemRoot%\SYSVOL\Sysvol\DomainName\Scripts folder.

3. Click Apply.

4. Click OK.

Once configured, the logon script will run (on the local machine where the user logged in) every time the user logs into the network using the corresponding account.

Note: You have to check if the user account used to log into the local machine has the appropriate rights to run or execute programs.

Related posts:

1. How to call a batch file from within another batch file