Loading....
Recent Article links:

3. Preparing Share and Printer objects

YaLS resource restriction commands

Command Explanation
ONLYPC: Name of PC, name of other PC
Only computers that are set with this command will be allowed to connect to this resource.
ONLYUSER: Name of user, name of other User
Only users that are set with this command will be allowed to connect to this resource.
ONLYLOCATION: Location name/number, other location name/number
Only locations of computers that are set with this command will be allowed to connect to this resource.
ONLYOFFICE: Office name/number, other office name/number
Only users with an office that is set with this command will be allowed to connect to this resource.
ONLYGROUP: Groupname, other groupname
Only group members of the groups that are set with this command will be allowed to connect to this resource.
ONLYMONTH: Month in numbers (1…12), other month, starting month-ending month
Only during the months that are set with this command the user will be allowed to connect to this resource. You can use the – to set ranges.
ONLYWEEK: Week in numbers (1…53), other week, starting week-ending week
Only during the weeks that are set with this command the user will be allowed to connect to this resource. You can use the – to set ranges.
ONLYMONTHDAY: Calender day in numbers (1…31), other day, starting day-ending day
Only during the calender days that are set with this command the user will be allowed to connect to this resource. You can use the – to set ranges.
ONLYWEEKDAY: Weekday in numbers (1…7), other day, starting day-ending day
Only during weekdays that are set with this command the user will be allowed to connect to this resource. You can use the – to set ranges. 1 = Sunday, 7 = Saturday
ONLYTIME: HH:MM, HH:MM, HH:MM-HH:MM
Only during the time that is set with this command the user will be allowed to connect to this resource. You can use the – to set ranges.
NOPC: Name of PC, name of other pc
No computers that are set with this command will be allowed to connect to this resource.
NOUSER: Name of user, name of other user
No users that are set with this command will be allowed to connect to this resource.
NOLOCATION: Location name/number, other location name/number
No Location of computers that are set with this command will be allowed to connect to this resource.
NOOFFICE: Office name/number, other office name/number
No users with an office that is set with this command will be allowed to connect to this resource.
NOGROUP: Groupname, other groupname
No group members of the groups that are set with this command will be allowed to connect to this resource.
NOMONTH: Months in numbers (1…12), other month, starting month-ending month
During the months that are set with this command the user will not be allowed to connect to this resource. You can use the – to set ranges.
NOWEEK: Weeks in numbers (1…53), other week, starting week-ending week
During the weeks that are set with this command the user will not be allowed to connect to this resource. You can use the – to set ranges.
NOMONTHDAY: Calender day in numbers (1…31), other day, starting day-ending day
During the calender days that are set with this command the user will not be allowed to connect to this resource. You can use the – to set ranges.
NOWEEKDAY: Weekday in numbers (1…7), other day, starting day-ending day
During weekdays that are set with this command the user will not be allowed to connect to this resource. You can use the – to set ranges. 1 = Sunday, 7 = Saturday
NOTIME: HH:MM, HH:MM, HH:MM-HH:MM
During the time that is set with this command the user will not be allowed to connect to this resource. You can use the – to set ranges.

Printer specific:

Command Explanation
STANDARDPC: Name of PC, name of other pc
This printer is going to be set as a default printer for computers that are set with this command.
STANDARDUSER: Name of user, name of other user
This printer is going to be set as a default printer for users that are set with this command.
STANDARDLOCATION: Location name/number, other location name/number
This printer is going to be set a default printer for locations of computers that are set with this command.
STANDARDOFFICE: Office name/number, other office name/number
This printer is going to be set as a default printer for users with an office that is set with this command.
STANDARDGROUP: Groupname, other groupname
This printer is going to be set as a default printer for users or computers that are member of a group that is set with this command.
LPTPC: Name of PC, name of other pc
This printer is going to be connected to LPT1 for computers that are set with this command.
LPTUSER: Name of user, name of other user
This printer is going to be connected to LPT1 for users that are set with this command.
LPTLOCATION: Location name/number, other location name/number
This printer is going to be connected to LPT1 for locations of computers that are set with this command.
LPTOFFICE: Office name/number, other office name/number
This printer is going to be connected to LPT1 for users with an office that is set with this command.
LPTGROUP: Groupname, other groupname
This printer is going to be connected to LPT1 for users or computers that are member of a group that is set with this command.

Share specific:

Command Explanation
DRIVELETTER: Driveletter:
The driveletter you want to assign to the share. Be sure to put the : at the end.
If you don’t add the DRIVELETTER command, it is going to make a shortcut in My Network Places.
MAPSUBDIR: Subdirectory on the share
Mapping the drive or NetHood shortcut not the the share, but to a directory on that share.

No wildcard allowed in any of these commands. Variables however, are allowed

Description field of published printers

The Active Directory Users and Computers console does not display published printers by default. This is because they are a part of the printservers computer object.

Screenshot of where to find the option Users, Groups, and Computers as containersOn the Active Directory Users and Computers console there is a menu View. Verify that under this menu, a √ is before Users, Groups and Computers as containers.

Now you can browse to the printer server, and expand the printer server object. After having expanded the printer server object, you are going to see all the published printers of that printserver.
Tip: You can simply move the printers to a seperate OU if you don’t like the View as a Container option.

Location of the description and location fields
Here are the Description and location fields of the printer object.

Keywords field of the published shares
Location of Keywords button

If this share is used for a My Network Places shortcut, the description field is used for the name of the shortcut.
To enter the YaLS resource restriction commands, click on the Keywords… button.

Location of share Keywords

All already existing search keywords can remain where the are. All command can be a new value.

ACF loading animated gif  Loading