Login script problem

[SpuffMonkey]

I've been pulling my hair out on this one all day - 2003/XP network, in the Student GPO a login script is supposed to be run that sets all printers using a simple "if a text file then printui.dll" type command. Today though - no students appear to be running the login script at all. I haven't changed the script or the location (NETLOGON share), or permissions though logged in as student I can't browse to NETLOGON anymore - I get a "Access to resource <folder> has been disallowed" error. If anyone has an idea of what to check next - I'd much appreciate hearing it. One other thing I noticed while doing this - the NETLOGON folder on one of the other servers is not syncing up to the main one now either...don't know if thats connected...

Cheers.

[ajbritton]

Is there any reason why you don't leave the script in the GPO?

[fooby]

Have you checked the event logs in both servers? This is a good starting point. Use this with eventid.net and you should be able to work out whats up.

fooby

[ajbritton]

Possibly something to do with ADM templates...

http://www.derkeiler.com/Newsgroups/...4-03/0189.html

[SpuffMonkey]

Is there any reason why you don't leave the script in the GPO?

Not at all - I didn't realise you could - how do you do that?

[mac_shinobi]

Use the gpmc

[ajbritton]

Is there any reason why you don't leave the script in the GPO?

Not at all - I didn't realise you could - how do you do that?

Easy... Go to GP editor, User Config, Windows Settings, Scripts, Logon, properties, then I think it's 'show files...'. This will bring up an explorer window. Drag the files in here then close the window. No when you click 'add', you should see the script.

[SpuffMonkey]

Is there any reason why you don't leave the script in the GPO?

Not at all - I didn't realise you could - how do you do that?

Easy... Go to GP editor, User Config, Windows Settings, Scripts, Logon, properties, then I think it's 'show files...'. This will bring up an explorer window. Drag the files in here then close the window. No when you click 'add', you should see the script.

Ta - I'll give it a go - coz its been driving me crazy today.

[SpuffMonkey]

OK - I put the script within AD - and still nothing - first statement is an echo and a pause - so its not even getting that far (I guess) - I've made sure scripts are processed in the foreground. I've created a shortcut to the original script in a student login area and can run it fine from there - so its not a permissions problem. I've run the GP Modelling - which shows the correct GPOs should be applying - can anyone think of anything else that could be causing this problem??

[Geoff]

What about using the GP Results wizard in the GPMC. Does that show anything as broken?

[ajbritton]

When in doubt, I try changing a few things to see what happens..

Try running a logon script of a different type...
Create a simple .VBS logon script eg.

msgbox "I'm the logon script"

Save it as TEST.VBS and test it by double clicking. You should see a simple message box. Now add it to your GPO as a logon script (I would remove the link to the original so that TEST.VBS is the only script). Now try the logon and see if it works.

[SpuffMonkey]

OK - the GP Results Wizard shows everything applying OK. AJBs test.vbs worked fine! But setting back to a .bat file didn't work again &*^%^%

Could I have denied running .bat files in some way that I haven't realised?

[SpuffMonkey]

OK - the GP Results Wizard shows everything applying OK. AJBs test.vbs worked fine! But setting back to a .bat file didn't work again &*^%^%

Could I have denied running .bat files in some way that I haven't realised?

[mac_shinobi]

what happens if you just do the same with the bat logon file or even if you just try to execute a bat file whilst logged into a local admin account on a client machine ( Does the bat file execute or does it just sit in the processes but doesnt do anything or what exactly ) ??

[Geoff]

ACL's?