Following the lead of other logon scripts for the enterprise I have specifically not used /D so the scripts cannot be modified while on the local drive.
As for robocopy, using /MIR would probably be the best solution but since we still have a few XP machines lingering on the network this isn't an option.
The one problem I don't have a solution for is if someone accidentally/unwittingly dumps a large file in the \\DC\ADLOGON folder as it will copy down. The other option would be to explicitly call xcopy only on the files kix needs but this would then make the script a hidden dependency if the files were to change in future.
It's tough writing code for an enterprise.
|