Managing The Domain; Creating A Logon Script - Quasarbiz JS100 User Manual

Table of Contents

1) net group /domain /nurses /add

2) net group /domain /doctors /add

3) net group /domain /nurses dean /add

4) net group /domain /nurses judy /add

5) net group /domain /doctors dawn /add

6) net group /domain /nurses dean /delete

7) net group /domain /doctors dawn /delete

Examples 1 and 2 create new groups called nurses and doctors. Examples 3, 4, and 5 add individual

nurses to these groups. Examples 6 and 7 delete individual users from the groups.

The JS100 unit automatically assigns all users to a group named users. It is not necessary to add

users to the users group, and users cannot be deleted from the users group. The net group

command cannot be used to query the members of the users group, but the net users query

returns the same information.

Note: All files on JS100 have permissions for the user who owns the file, a default primary

group, and Everyone. Separate permissions can be added for individual users using

Windows access control list (ACLs). The default primary group is always users and cannot be

changed. For the current release, there is no reason to create a group account.

For JS100 devices that are also configured to support NFS, JS100 assigns UNIX user IDs

(UIDs) and group IDs (GIDs) to files created through CIFS. User IDs are in the range

35000–40000; group IDs are in the range 42000–43000. Moreover, setting up permissions

on a Windows platform and copying the file to a JS100 unit disables your permissions.

MANAGING THE DOMAIN

Use the Microsoft net user command to add, delete, and modify user accounts. Use the Microsoft

net group command to add, delete, and modify group accounts as well as to add and delete users

memberships to groups.

A JS100 unit passes the name of the current user to the logon script when the script is run. This

allows the script to run differently for different users. Use the "%1" replaceable parameter to

access the user name.

After you have access to the netlogon share, you must create the logon script. It must reside within

the netlogon share that the JS100 unit automatically creates in the pool given in "Profiles and

Scripts Pool". You can include directory names within the script name, but the path must be relative

(the path cannot start with a drive letter or a slash). For example, if you type netlogon.bat, when

you have access to the netlogon share, you must create a file named netlogon.bat. Or if you type

scripts/netlogon.bat, you must create both a directory named scripts as well as the netlogon.bat

file.

Page

Document: VS100UM101

Table of Contents