We use a "Logon Batch file" that runs for all users when they login to the domain. It has a whole bunch of stuff in it, including a BUNCH of "ifmember statements" cascaded with "if not errorlevel 1 ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback