8 replies
by chad r.
Sir,
Not knowing what type of scripts you are running the only thing that can come to mind is did you add a new BDC server or a new PDC server. With these new additions did you copy over the scripts to these new servers if they where added. Have you giving the Domain User Security rights to do what your script has ask to do. If I new exactly what the scripts where I might be able to answer you better. Hope this helps you come to a solution.
by tyson mock
Hello Chad,
Thanks for the ideas, I hope my comment above clarified this a little. The users do have sufficient privileges for the resources and we can browse to the share after logging in as a user and manually double-click the logon script batch file and it works like a champ. The netlogon share has sufficient rights for the user (read) and security acl on folder and files are also sufficient (read). The script runs under any computer account that was joined to the domain by an administrative account but under our tech account (which has been used hundreds of times to join computers to the domain and is only a domain user account without admin privileges. Everything works except the logon scripts.) I have tried taking the same computers joined by the tech account and disjoining the domain, rebooting, rejoining the domain again with the tech account and it adds succefully and I can access network resources, it just does not run the logon script. The only way to get itto run the logon script is to add the computer to the domain by using a domain admin account. Yes, problem is solved but the question remains as to why I have to do this given the steps I have taken above noted in my comments. Thanks for the help!
by tyson mock
The scripts only contain net use commands
@echo off
net use f: \\server\share
They are saved as .bat files in the Netlogon shared folder and is on every PDC and BDC.
I've actually found the problem and am able to fix it. The problem was this: I created an account called tech that is just a domain user with specific access to tech resources. We have added a group that contains this account to all of our Win2K workstations in the administrators group. That way we can log on as tech to win2k workstations and have admin privilage without having domain admin privilage. We have also been using this account to add workstations to a domain, probably over a hundred so far. I thought we could do this because if you open user manager and select "policies" then select "user rights" you can then choose the "add workstations to domain" right and here is where we added the tech account. Turns out that if I take any workstation added to the domain with the tech account and disjoin from domain, reboot, rejoin domain using a domain adminstrative account the workstation then runs the script just fine. My question now is this: Isn't there a way to make a regular user account authorized to join an unlimited number of computers to the domain and successfully run login scripts? My tech account was able to successfully add the computers to my domain but then those workstations couldn't run login scripts. The other noteworthy peculiarity is that in server manager, none of those workstations indicate that they are on even though they are on and can access domain network resources! Very weird in my opinion. Any thoughts on this?
by avi_mohod
Hi,
First of all copy that login script to any workstation and run from there.See if that is running.If not running plz check the problem.Set login script for user in domain admin group and login with that user from any workstation.See if now urlogin script is working or not.If admins r able to execute the scrpits then it may problem of permission.Plz check rights in polices option and also special rights on server and workstation.
Last option I think is nay problem with os. avi.
by tyson mock
by avi_mohod
Hi,
First of all copy that login script to any workstation and run from there.See if that is running.If not running plz check the problem.Set login script for user in domain admin group and login with that user from any workstation.See if now urlogin script is working or not.If admins r able to execute the scrpits then it may problem of permission.Plz check rights in polices option and also special rights on server and workstation.
Last option I think is nay problem with os. avi.
by tyson mock
by tyson mock
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending