User logon script problems

[loweredchevy]

I have a problem that just baffles me. I got windows 2000 server up and going no problem. Got Active Directory and everything else up and running no problem. I have about 25 windows 2000 professional clients that I am trying to run *.bat files to map drives with. All that is done and in the right place. All the users are setup with there respective *.bat file. The problem is, unless the user is part of the administrators group, the script will not run. Therefore the script is only running for admins. If I take one of the other users and add them to the Admins group ... the script works. What am I missing here? I had no problem when we had NT4.0 but this has me baffled.

 

[Claudek]

What are the permissions on the actual batch files?
Also have you simply put the scripts into the Netlogon folder and specified the scripts in the Users' Logon script section in AD or created group policies to distribute those scripts? In the first case, the share and ntfs permissions will be looked at and the most restrictive will apply. In the latter case, make sure the apply group policy is set to the group you wish the script to be applied to.

Claudius (What certifications??)

http://www.iteq.com.au

 

[loweredchevy]

I put the *.bat files in my \WINNT\SYSVOL\sysvol\domain\scripts directory. The files are just to map network drives only. I specified which script to be used for which user in the profile. I did nothing with groups though. Except scripts only work if the user is part of the admins group. It sounds like the first thing you mentioned ... what is the fix?

 

[GlenJohnson]

I've seen a problem like this before when the box marked "Allow Inheritable Permissions" is checked, which basically says, get my permissions from the folder above me. Check it out and see if is checked. Good luck.

Glen A. Johnson
Johnson Computer Consulting
MCP W2K
glen@johnsoncomputers.us

http://www.johnsoncomputers.us

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884
"Watson, the game is afoot!"

 

[loweredchevy]

Tried that and still no luck.

 

[Stevehewitt]

There is no 'fix' as that isn't the way MS want you to do it.

Use Group Policies - never had a problem with VBS or BAT scripts using GP's.

Copy the scripts to your clipboard, then open AD Users and Comps, go to OU you want it applied to - properties - Group Policies. Either create a new one or edit current one. Go to User Configuration - Logon Scripts. Pop it in there and after a client restart you should be away!

Good Luck


Steve.

 

[loweredchevy]

Still no luck unless I did it wrong. This is my first time working with Active Directory and my books only tell me so much, Can you give me a quick walk through to see if I did it right or not regarding group policies. I put the file on the users startup folder for now to work until I get this figured out.

 

[jagoan]

Have you deploy run as, to give grand admin permission for batch file run on client ?