Hardware

Ask something
Question Locked

Login Scripts not working

0 helpful
16 replies

by captn.dude

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi All,

I am trying to set-uo a mapped drive at logon for an OU. I am no system admin so please bear with me. I am using the follwing script syntax:
Set objNetwork = CreateObject("wScript.Network")
objNetwork.MapNetworkDrive "Q:" , "\\srv9\applications"

I have also tried the following .bet file in place of the vbs with no change in the results:

net use q: \\srv9\applications persistent:yes

I then assigned that using the Group policy management mmc snap-in to everyone in the OU. When they login nothing happens. FYI I put the script in the default directory that the GPO snap-in asked for. (\\"FQDN"\SysVol\"FQDN"\Policies\{AC6BDDD8-8B3D-4BAD-B9FF-92C5D33F4895}\User\Scripts\Logon) Where "FQDN" is our domain. Before anyone asks why drive mappings vs UNC, the remote application requires it.

16 replies

by captn.dude

The scripts I have work, they just don't appear to be running. For example if I manually run that script on a host it works fine, just not when I try to use AD to push it.

by 1bn0

FYI. The Netlogon directory appears as a share on every server in the domain.

\\server1\netlogon
\\server2\netlogon
\\server3\netlogon
\\server4\netlogon

Anything placed in the netlogon share of one server will be replicated/copied to every other server in the domain. This usually happens within minutes.

Workstations then look in the netlogon share of whatever server thay are authentacting against for the logon scripts.

I never work through the sysvol path, just enter the first server name that comes to mind, \\servernas, and add \netlogon after it. \\servernas\netlogon.

by captn.dude

The script(s) work if I visit a workstation and execute the vbs things are fine. Via GPO it works for two of the users but doesn't work for all of the users even though they are all in the same OU. Weirdness.

by jellimonsta

What are the similarities and disparities of the users? OS, security priviliges? You may need to use a .bat file to call the .vbs.

by rob miners

You can copy CScript.exe and logon.vbs to the NetLogon folder, modify and call the batch from your proper logon script.

Example:

:SCRIPT
: Run logon script proper
%0\..\CScript.exe %0\..\logon.vbs //Nologo

by captn.dude

They are all domain users with standard privs. there is no logical reason for the disparity, I went and adjusted the GPO to allow for "slow network connections", we'll see if that helps. Worst case I just have them map a persistent drive by actually sending them the vbs. It's just frustrating.

by captn.dude

What is this script doing? I don't know what CScript.exe and logon.vbs do. This is not my primary role with this company, we just lost our sysadmin.
My issue is that when a user executes the vbs locally, all is fine. I simply cannot get logon scripts to run for all users within an OU using GPO. It does work for two of the five with no issues at all.

by jellimonsta

Are they all running XP SP2 or greater?

I would generally have a batch file (or CMD) in the NETLOGON call the script.

Have you tried creating logon.cmd in the NETLOGON share with the following entries?

call Wscript %logonserver%\netlogon\logon.vbs //e:vbscript

Also, have you verified the users who are not functional have 'Connect client shares at logon' checked in the 'Environment' tab of their user properties?
Regards.

by captn.dude

Everyone is running XP SP2. I do have a question about your script.

"Have you tried creating logon.cmd in the NETLOGON share with the following entries?

call Wscript %logonserver%\netlogon\logon.vbs //e:vbscript

Also, have you verified the users who are not functional have 'Connect client shares at logon' checked in the 'Environment' tab of their user properties?
Regards. "

All users have "Connect client drives at logon" selected. With respect to your script, Should I use that exact syntax? What is //e:vbscript? And where is NETLOGON, sorry for the n00b questions. Also, this site is not emailing when you reply so sorry for the delay.

by jellimonsta

Never mind that, it was specific to our scripting. :0

In your original script, have you tried removing the space before the comma?

Set objNetwork = CreateObject("WScript.Network")
objNetwork.MapNetworkDrive "Q:", "\\srv9\applications"

That may well be your problem.
Edit:
Also, if you browse to that server you should see NETLOGON as a root share. Or from your system, go to Start>Run:
%logonserver%\netlogon

Another thing you can try is renaming your logon.cmd to domainlogon.cmd and updating the GPO. I found this on 2k, but it may still be valid in your case.
http://support.microsoft.com/kb/277803/en-us

Good luck.

by captn.dude

I haven't fixed it yet but thanks for the info. I had to stop messing with that and do some of my real, pen-testing, work.

This discussion is closed to new replies.