Configuring Login/Logout scripts via GPO

Overview

It is possible to automate the users' authentication process in Kerio Control by creating a Group Policy Object containing scripts to log in and log out users from Kerio Control.

This article serves as a guide to configuring the Windows Active Directory GPO to automatically log in and log out users from Kerio Control

Important: The screenshots used in this article are based on Active Directory running on Microsoft Windows Server 2008 Domain Controller.

Solution

Connect to your domain controller. Go to Start > Administrative Tools > Group Policy Management.
Select the domain and go to Action > Create a GPO in this domain, and Link it here...
Enter an appropriate name to this policy.
After creating the object, select Action > Edit....
Navigate to Computer Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone.
Look for Logon options and double-click on it.
In the Logon options dialog box, click on Enabled and select Automatic logon with current username and password option from the Options drop-down menu.
Apply these changes.
Select User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff).
Double click Logon and click Add... in the properties box.
Click Browse....

Create two files: logon.vbs and logon.bat. Use the sample code in the table below for reference, changing the logon script path:

File

Code

logon.vbs

Dim oIE

Set oIE = CreateObject("InternetExplorer.Application")

oIE.Visible = False

oIE.Fullscreen = False

oIE.Toolbar = True

oIE.Statusbar = True

oIE.Navigate("http://www.google.com/")

WScript.Sleep(30000)

oIE.quit

logon.bat

cscript //nologo \\domain\sysvol\..\logon.vbs

Select logon.bat with a double-click and click OK.
Select Logoff with a double-click and click Add....
Click Browse...

Create two files: logoff.vbs and logoff.bat. Use the sample code in the table below for reference, changing the logoff script path: