NT 4 Login script & Restriction similar to 2000

[televisi]

Hi All,

Quite new with NT stuff, currently I have 1 NT 4 Server and 2 clients using NT Workstation & 1 WIN 98 (Ask me not why my company choose that o/s instead of 2000).

I'm just about to create login script (using .bat for instance) and user profile in server, so it will looks like this:

SERVER

=====

user profile path => c:\profile\user01... 03 (as "profile" directory is shared with ALL Permissions and also shared to ALL users)

Login script name => login.bat (I put in c:\winnt\system32\Repl\Import\Script\ of server computer)

So in Server "user configuration" I enter:

User Profile Path = \\SERVER\profile

Login Script Name = login.bat

My questions are:

1. everytime client login using any username, it always give me an error "Windows cannot log you on because the profile cannot be loaded; Detail - Access is denied"

2. If I remove the value inside User profile path field, it successfully log-in the client but does not run any commands from login.bat;

There is a MS-DOS window shown for about 1 second and then gone, the warning is "cannot find specified directory" or something like that, although the login.bat is consist only FOR-LOOP command and not even accessing any directory

Am I putting a wrong value to any of those fields?

3. Is there any way for NT4 Server to have similar feature that 2000 has, which enable admin to control/set/restrict any part of windows (as in 2000 it has "gpedit.msc" and able to restrict other programs part of windows, e.g. MSIE, Outlook, etc...)

Any solutions would be great

Ps: Instead of .bat, I'm looking forward to moving to .vbs too as this pretty much promising to make this small network work easier

[televisi]

Ah.. one thing I forget is, I want to have roaming profile for this scenario.

And I also try to create simple restriction using System Policy editor and put the file in:

c:\winnt\system32\Repl\Import\Scripts\NTConfig.POL

and the restriction works okay when client login...,

but still, not showing any login script

PPS: c:\winnt\system32\Repl\Import\Scripts\ is shared as NETLOGON by NT4 by default