Discussion Locked

NT Login Scripts

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a one PDC and a BDC in our domain. Some users when they login, their login scripts does not run.

Please advice on where to start my troubleshooting. Thanks.

5 replies

by matt duggan

Replication is almost certainly your problem here. Take a look in the NETLOGON shares of each domain controller. If they don't match, you've found your problem.

Replication is controlled by the Directory Replicator service. If this service isn't running on both machines, scripts won't replicate. Replication is configured through server manager (look in the properties of each domain controller, and click on the replication button). Check to see that the service is running with the same account on both machines, and that the account has sufficient rights to do its job (full control of C:\WINNT\SYSTEM32\REPL and everything within).

Make sure the from list is your PDC, the to list is both the PDC and the BDC.

Put your logon scripts into C:\WINNT\SYSTEM32\REPL\EXPORT\SCRIPTS on the PDC (assuming you went with the default paths), and sit back and wait.

Replication takes time - lots of it. To be honest, it never seems to work quite as well as you'd like it to. But be patient, andthe files will get there. If you really want to kickstart things, copy the scripts to C:\WINNT\SYSTEM32\REPL\IMPORT\SCRIPTS on both boxes, but this can lead to difficulties later on.

Best of luck.

by joseph moore

First, when the users who do not have a login script that runs when the log in, do they get an error message saying a domain controller cannot be found and that cached profile information will be used? If that happens, then the user logging in is not able to authenticate to either domain controller; they would, therefore, not have their login script run. So, if that is going on, you need to fix that. Usually, adding the PDC and the domain to the LMHOSTS file takes care of that problem. To do the syntax for the LMHOSTS file, read Technet article Q180094:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q180094

Now, if the users are autheticating to either domain controller, but the script is not running, then I would make sure that the user profiles are set up to run a login script. In User Manager for Domains, open the users up, hit the Profile button, and make sure a valid login script name is in the Logon Script Path textbox.

If the users do have a valid logon script, then make sure the login script files on the PDC and the BDC are synchronized. Now personally, I HATE NT4 Replication. I think it is not worth the time to set up. So, whenever I have to make a change to a login script, I work on the copies on the PDC, then I manually copy them to the BDC. I have tried to use replication, and I have had it fail me. So, I do it manually. It only takes a moment.
So, open the Netlogon share folder on both the PDC and the BDC, and copy the files from one to the other, until both machines all have the same files. Then have your users try to log in.

Hope it works!

This discussion is closed to new replies.