Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

hopefully a quick question, we run roaming profiles on Server 2008 R2 to allow desk hot swapping. At the moment, because of some of the software packages running, we have to manually set the user as a local admin, create various internet explorer trusted sites and install some active-x controls for a web based package.

I am wondering if there is a way to speed this up by happening automatically when the user is logged on for the first time? I imagine this can be done through a Group Policy but must admit I'm not sure where to even start looking as I haven't used it very much before!

thanks in advance!

share|improve this question
Just as a word of advice, I would advise against running local admin unless it's absolutely necessary. Follow the security practice of "The rule of least privilege" and you'll save yourself a lot of potential headaches that local admin can bring (unwanted software, malware, the ability for users to play with disks and network settings, etc). – DKNUCKLES Sep 28 '11 at 12:59
I am aware that setting everyone as local admin is not ideal, but sadly a couple of the software packages we use need us to set all users as local admin or we will run into problems. – Neal Sep 28 '11 at 16:00

1) Local Admins - do this using a security group and Group Policy Preferences

2) Trusted Sites - group policy again

3) ActiveX Control - depends exactly what it is and how it installs. May be one for a script.

Please don't cop out and bodge it, the first two are EXACTLY what Group Policy / Preferences were built for. You're using cutting edge server technology, so utilise it! There are loads of resources on the net to start off with.

share|improve this answer
I'll have a look into using security groups for the local admins, also I am not sure how to add trusted sites into group policy but will try and find that too. also how would the script be worded to install active-x controls? thanks – Neal Sep 28 '11 at 9:47
Perhaps this will help with your GPO… – DKNUCKLES Sep 28 '11 at 12:59
excellent thanks, I will check it out now! – Neal Sep 28 '11 at 16:01
Added the trusted sites in quite happily! I will do some checks tomorrow morning but all looking good so far. Thanks for that, I get a bit lost in Group Policy sometimes :s – Neal Sep 28 '11 at 16:13

My first idea would be to try a logon script.

share|improve this answer
but i don't need it running every time someone logs on, only the first time to set the initial settings. Also i am not sure of the commands to set any of the things i need to do, so if you do know, le me know and i could give it a test. cheers – Neal Sep 28 '11 at 9:40
Then add some logic that checks if the necessary steps are already done and skip them if this is the case. – Sven Sep 28 '11 at 9:41
sorry just added to previous comment, i will have a look into logic commands for the bat file – Neal Sep 28 '11 at 9:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.