+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Thread, Login issues with domain trusts in Technical; I have recently set up a trust between the two domains at our College. It seems to be set up ...
  1. #1

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45

    Login issues with domain trusts

    I have recently set up a trust between the two domains at our College.
    It seems to be set up fine, the security seems to work and I can log onto either domain from any comptuer.

    The problem I have is that when I log using an account in domain x from a machine in domain y my home folder correctly but the login scripts doesn't execute, thus I have no other network drives.

    If I browse for the sysvol share and the login script I can execute it manually with no problem, I don't know why it doesn't execute manually.

    Help.

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    Quote Originally Posted by Stuart_C View Post
    I have recently set up a trust between the two domains at our College.
    It seems to be set up fine, the security seems to work and I can log onto either domain from any comptuer.

    The problem I have is that when I log using an account in domain x from a machine in domain y my home folder correctly but the login scripts doesn't execute, thus I have no other network drives.

    If I browse for the sysvol share and the login script I can execute it manually with no problem, I don't know why it doesn't execute manually.

    Help.
    On the script use the full DNS name of the server instead of the short name if you haven't already.

    instead of \\server\share
    use \\server.domain.com\share

  3. #3

    Join Date
    May 2007
    Location
    Suffolk
    Posts
    145
    Thank Post
    2
    Thanked 19 Times in 17 Posts
    Rep Power
    18
    Ta, I had the same problem yesterday, the school tech WILL be impressed, though your name will get the credit!

    Thanks again.

  4. #4

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    Didn't work. It looks like the script is not executing rather than a problem with the script itself. As I said if I browse to the other sysvol folder I can see the script and execute it and ir runs fine. It just doesn't run automatically. The Home Folder maps in OK as I have set up DNS records for the servers in the oposing domains in each domain.

    I did notice that I get the error 1109 detailed here. Whilst I get what it is on about I don't understand if this is the problem as the logon scrip isn't part of a GPO it's part of the users account. If it can map the home folder why can't it run the login script?

  5. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    Quote Originally Posted by Stuart_C View Post
    Didn't work. It looks like the script is not executing rather than a problem with the script itself. As I said if I browse to the other sysvol folder I can see the script and execute it and ir runs fine. It just doesn't run automatically. The Home Folder maps in OK as I have set up DNS records for the servers in the oposing domains in each domain.

    I did notice that I get the error 1109 detailed here. Whilst I get what it is on about I don't understand if this is the problem as the logon scrip isn't part of a GPO it's part of the users account. If it can map the home folder why can't it run the login script?
    Try putting it in the Group policy. When you do so use the full DNS name for the server.

  6. #6

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    Might try that later as it's going to force me to impliment the cross forest processing of GPO's

    Still don't see why it's not executing as part of the login!

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    also might be worth to try using the full DNS name of the server on the logon script box in the user properties in AD.

  8. #8

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    Tried that as well. No joy.

    Actually I don't think that a GPO will work. All our business users are in the same OU yet I have about 5 different scripts for different people dependingon what they need to access.

  9. #9

    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,168
    Thank Post
    98
    Thanked 319 Times in 261 Posts
    Blog Entries
    4
    Rep Power
    113
    Can you manually assign the network drives once you've logged on, while you're on the other domain?

    When you manually run the script is it actually assigning the drives, or just running?
    Last edited by jamesb; 5th December 2008 at 02:15 PM.

  10. #10

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    try using full DNS names then

  11. #11
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    932
    Thank Post
    37
    Thanked 135 Times in 115 Posts
    Rep Power
    41
    Quote Originally Posted by Stuart_C View Post
    Tried that as well. No joy.

    Actually I don't think that a GPO will work. All our business users are in the same OU yet I have about 5 different scripts for different people dependingon what they need to access.
    Multi GPO's filtered to security groups... or your VBS script can check against groups?

    What happens if you run the logon script as a visible batch file?

  12. #12

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    Kind of answering Jamesb and DrP...
    If I log in to a machine in domain Y using a domain X usernmae I just get the standard desktop. My home drive appears (\\serverX\users\usernameX)

    If I go to Start ==> Run ==> \\domainX\sysvol\domainX\scripts\scriptname.bat I can see it and run the script. The script runs fine and all my drives appear.

    Now whislt I can manually run this for me (pain that it is) for normal people it's not really an option.

    Also I've tried FQDN's for the script path and in the scripts themselves.

  13. #13
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    932
    Thank Post
    37
    Thanked 135 Times in 115 Posts
    Rep Power
    41
    Sorry, I meant if you use GPO to turn logon scripts to visible to see what happens when it runs...

    User Conf > Administrative Templates > System > Scripts

    What about the path \\domainx\netlogon\scripty.bat ?

  14. #14

    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,168
    Thank Post
    98
    Thanked 319 Times in 261 Posts
    Blog Entries
    4
    Rep Power
    113
    Just to check, have you got Administrative Templates\System\Group Policy\Allow Cross-Forest User Policy and Roaming User Profiles enabled?

  15. #15

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    Check the ACL's on the share/sub folders and scripts. Can you confirm what they are?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Restricting Domain Login List
    By Stuart_C in forum Wireless Networks
    Replies: 5
    Last Post: 28th October 2008, 11:35 AM
  2. Domain Trusts, just a quick question. . .
    By maniac in forum Wireless Networks
    Replies: 6
    Last Post: 22nd July 2008, 12:33 AM
  3. Strange Login Issues
    By jsnetman in forum MIS Systems
    Replies: 0
    Last Post: 3rd April 2008, 09:18 AM
  4. Replies: 7
    Last Post: 20th December 2007, 03:45 PM
  5. Inter Domain Trusts -- how do you do it
    By Hedghog in forum Windows
    Replies: 5
    Last Post: 4th November 2007, 09:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •