100 adminstrators

[ptrainor1]

2000 serve, xp clients, ie 7

 

new profile share needed on server for new man profiles........all ok.......however old vbs logon script only runs for domain admin... checked wscript permissions and reg........changes make no difference.........all worked ok before new profile........... gpo loads ok.............any help appreciated!

[Gatt]

I'll hazard a guess that its to do with ur mandatory profiles - which by design do not allow changes to them when users log in.

 

What is the nature of the VBS Script?

 

(Ok now i sound like the Holo Doc from Voyager :?)

[ptrainor1]

thanks but problems seems certain to do with vsb and wscript. the script sets printer, shared drive and IE homepage

 

when logged on as domain user.... message box appears........"failed to load settingd...........access denied" linked to wscript........... when logged on as d.admin........no problems

[DMcCoy]

Did you make sure to copy the profile from the profiles tab in computer options? You need to set the permission to "Everyone" when you copy it to the server. You can't just copy the profile folder as the GUI copies them and then changes internal registry values as well.

[ajbritton]

File associations? Can you run any .VBS when logged on as non-admin?

[ptrainor1]

it seems not

i can place a copy of the vbs logon script onto a hard disk of a computer and still it will not run for a non admin

[apeo]

Nothing to do with gpo is it, as there is a setting to prevent scripts from running.

[ptrainor1]

no i think the script runs ok..........it does for admin and the exact same setup but with a different profile worked ok .

[apeo]

Does admin and non-admin share the same gpo? Can you get non-admin to work now? Perhaps you could try creating a non-admin user, but have a roaming profile and test to see if the scripts will run.

[ptrainor1]

yes same gpo - only 2 in use - default doman and "all" checked event viewer on workstation...... errors 1085 and 1000..... client side folder redirection failed ( there is no redirection policy/setting) and could not execute the script.

[ajbritton]

Try entering the following in a CMD window;

 

CSCRIPT.EXE (path to .VBS file)

 

eg

 

CSCRIPT.EXE C:\TEMP\TEST.VBS

[ptrainor1]

yes it runs ok with cscript within a command prompt ( though only admin users can get to cmd prompt)

[apeo]

So you only tested in admin? or did you try creating a bat or cmd that will run the command? Might be worth creating a bat file that just runs a bat script (eg md test) and a bat file that will run a script (eg CSCRIPT.EXE C:\TEMP\TEST.VBS). If the bat file wont run in non-admins at all it more than likely means you have a policy (be it in the profile or domain level) that stops bat scripts being run and if you can run bat files but the vbscript wont run then its likely theres a policy that stops vbscripts. If both runs ok then i would guess its a problem with access to the scripts.

[ajbritton]

If it runs OK using CSCRIPT, then my bet is file associations.

 

Open an Explorer window then go to Tools, Folder Options, File Associations tab and scroll down to the VBS extension entry.

 

The corresponding FileTypes entry should be VBSFile and the Opens With should read 'Microsoft ® Windows Based Script Host'.

 

Clicking on Advanced should reveal 4 actions (Edit, Open, Print, Open with Command Prompt)

[DMcCoy]

Did you copy the profile in the way I suggested? If not then the users (except the one who created the profile) will not have any write access to HKCU!

[Gatt]

Check ur Software Restriction Policy (SRP) to ensure that CSCRIPT.exe , and i think WSCRIPT along with .VBS files are allowed

Had similar problem last summer with vbs files not running (ie printer script)

Also added the NETLOGON to the allowed list to ensure all files in there are able to run.