simple logon script not working

[capkirk]

I have a very simple logon script that maps a drive.
I clock on it from a PC and it works just fine.

so I logged onto my server, went to active directory users and computers, right clicked on my domain, and created a new OU.

I then right clicked on this OU, went to Properties, then Group Policy (by the way, it asks me to upgrade to GPMC, is that necessary for a single domain like we have?)

created new group policy object, then computer settings, scripts (startup and shutdown)went to propeties of Startup, did an ADD, then clicked on browse and pasted my VBS script in the window. I stepped out of all that, then assigged a test machine to that OU, did a gpupdate on that machine and then logged of and back on but I never get the mapped drive.

how would I troublehoot this? I mean it works if I click on the script, but not as a logon.

 

[markdmac]

Login scripts are just that, login scripts not startup scripts. You can't map a drive on startup sinc ethere is no user session. You need to make it a login script.

Refer to my FAQ for more information. faq329-5798

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[capkirk]

I reviewed your FAQ (nice stuff by the way) and created a new login script (called login script) to test with, but didnt seem to work.

So I did a gpresult on the PC, and it says
"the following GPs were not applied because they were filtered out

login script
filtering: Not Applied (empty)

I logged onto the server and looked at the GPMC, and see that the script is enforced, link enabled.

also Security Filtering shows it is applied to authenticated users.

so what have I missed here?

 

[capkirk]

additonal info: on the event viewer on the PC in question I have this:
**********************************
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 6/6/2007
Time: 8:55:13 AM
User: NT AUTHORITY\SYSTEM
Computer: mycomputer
Description:
Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.
********************************************
and also:

**************************************
Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 6/6/2007
Time: 8:55:51 AM
User: N/A
Computer: mycomputer
Description:
Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.

****************************************

I can see the domain controllers sysvol share from this machine.

what should my next step be?

 

[markdmac]

Sounds like you have a DNS issue. Verify your DNS configuration.

DNS Settings

Set all static NIC TCP/IP properties to only list internal DNS servers.

In DHCP set the DNS setting to internal DNS servers.

In DNS, configure ISP DNS on the forwarders tab.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[capkirk]

Darn, just tried that, didnt have any affect.

So I went and moved the PC back to its original OU, and the errors in the even viewer did not reappear.
Nothing about not getting the domain controller name or having problems contacting active directory.

so I am back where I started.

What started all this was that I had originally tried to setup an inventory script as a login script, when that didnt work I tried creating a new OU and setting up couple of different scripts for the PC in that new OU for test purposed, which is when I started posting here.

no matter what I do any new GP I add gets filtered out, Filtering not applied (empty).

but I have a software restriction GP I setup several years ago to keep users from running minesweeper and solitare, and that works just fine.

my head hurts.

 

[markdmac]

In order to assist further we would need a diagram of your OU structure and GPO structure.

Use GPMC, take a snapshot. Use mspaint to change the domain name if you like to protect the innocent and provide a link to the snapshot.

Sounds ike you really have an AD/GPO problem and not necessarily a vbscript problem. I would suggest posting a new thread on the Windows Server 2003 forum.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[capkirk]

I'll do that.

thanks.