Windows Active Directory (login/logout scripts)

Question

Active Directory

AD has the following sections:

User Configuration->Windows
Configuration->Scripts->Logon User Configuration->Administrative Templates->System->Logon->Run Specified Programs at Logon

Why do I need two keys? What is their difference?

Answer 1

In the first case, the scripts to run are stored in SYSVOL and replicated between controllers, thus the script launch is guaranteed, because SYSVOL is available to all members of the domain.
In the second case, the script/program is launched from the local computer, and information about the programs being launched is stored in the registry in the branches:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
( see support.microsoft.com/kb/314488 )

Answer 2

Perhaps then, why does “Group Policy Preferences” exist when it is possible to do the same through “User Configuration-> Windows Configuration-> Scripts-> Logon”

Answer 3

It's like doing the same thing, but in a new way. Maybe you can somehow use it for your own purposes, but sometimes it's funny that there are tools, but the goals are not yet clear.