I have the exact same situation at the school I work at. What I do is to keep all of the user accounts seperate from the computer, then on the OU's that the computers are in (one OU per classroom) I turn on loopback processing and set the User policy to redirect the folders. This way no matter what user logs into that computer, they get the appropriate menus.
To minimize the number of GPO's, I have a startup script that puts what I call the 'BaseOU' into an environment variable of the same name and use the %BaseOU% variable in the folder redirection. The script strips out all of the long ou=OUName,cn=blahblahblah junk and just leaves the short name of the OU that the computers are in.
ou=RoomNumber,cn=Classrooms,cn=Campus,dc=mydomain, dc=local becomes just RoomNumber.
[code:1]Set objSysInfo = CreateObject("ADSystemInfo")
strComputerName = UCase(objSysInfo.ComputerName)
'Manually pull out the first OU= from the string
intStart = InStr(strComputerName, "OU=") + 3
intLength = Len(strComputerName)
strBaseOU = Mid(strComputerName,intStart,intLength-intStart)
intEnd = InStr(strBaseOU, ",") - 1
strBaseOU = Left(strBaseOU,intEnd)
Set objShell = WScript.CreateObject("WScript.Shell" )
Set colSystemEnVars = objShell.Environment("SYSTEM")
colSystemEnVars("BaseOU") = strBaseOU
[/code]
Scott


LinkBack URL
About LinkBacks
Reply With Quote