logon script returning: System error 1326

[tood]

Hi all,

I have been hammering my head against a brick wall for sometime on this:

I have win2k Pro clients connecting to a win2k AD domain controller also running file and print services. I'm running a logon script through a group policy (the only thing applied in the policy). The script is running the net use command to map three shares from the DC/fileprint svr.

the majority of clients get the script and mappings fine.

However there are a couple of clients that get the logon script but return the following error on the drive mappings:

system error 1326 has occurred.

Logon failure: unknown username or bad password.

before the net use commands are run the script echo's the %username% and %userdomain% which works fine.

after the script has run, if I try the net use commands manually the mappings work !!!

the trouble seems to be machine specific as when a user logs onto another machine the scripts run with no trouble.

I have tried:
1. removing the computer account from the domain and re-adding it.
2. changing the computer name
3. removing all entries of the machine from DNS and WINS and getting the client to automatically update these by rebooting.
4. removed and re-added TCP/IP, Client for Microsoft Networks and File and Print sharing for microsoft networking.
5. flushed DNS on the client.
6. ran a repair process from the console.
7. hit my head against the brick wall to see if the problem was in my head.


I'm out of idea's, apart from rebuilding, anyone got any advise or sympathy ???

Todd

 

[GiaBetiu]

As you know, there is logon script, and startup script.
Startup script is part of the Machine policy.
Logon, part of the user policy.

Which one do you use? Logon policy? Are your users part of a container that has assigned this group policy? Are your group of users listed in security of that GPO with the rights of Apply policy and Read?
Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, MCSE Win2K

 

[tood]

Hi Gia,

thanks for your response.

the policy is using the logon script part of the user policy. the machine part is disabled. the rights to the GPO are fine as the policy is applied, verified by using gpresult.exe. it's just the net use commands are returning the error. when I run the command manually it works fine.

Regards
Tood