Solved

Win2k8 Server not running login script

Posted on 2009-04-09
24
2,114 Views
Last Modified: 2012-05-06
So I migrated from a windows 2000 DC, to a Windows 2008 DC.. The entire migration went pretty painlessly. The FSMO roles transferred without issue. The files and shares came over seamlessly. There seems to be one small hitch however. When I shut down the Win2k controller, users are able to log in but the login scripts do not run.

Any ideas?
0
Comment
Question by:DarkHound
  • 12
  • 12
24 Comments
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

Where are the logon scripts configured to run from? If they're running direct from a share hosted on the Windows 2000 box, they won't run when it is shut down as the script will be unavailable.

I'd suggest you relocate your scripts to the \\domain.com\NETLOGON share and update the GPO objects accordingly; from there, they will be replicated around all DCs on the network automatically.

-Matt
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
They should be running from a share on the 2k8 server, but when I connect to \\domain\NETLOGON it connects to the windows 2000 server. I want it to always use the Win2k8 server because I will be removing the 2000 server.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

\\domain\NETLOGON will generally connect to any available DC. Once the 2000 DC is demoted, only the 2008 DC will answer requests for that network share.

If you run an rsop.msc at a client computer, and check the path reported which the scripts are running from, what do you see? The 2000 share or the 2008 one?

-Matt
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
Matt,

I can't see where I'd find the path you are talking about.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

An rsop.msc output is simply a listing (in the usual Group Policy view) of all the policies applying to a particular user and computer in its current location and other circumstances.

Run an rsop.msc by going to any client computer where the script should run, click Start > Run > type "rsop.msc" > OK. Then browse down to User Configuration, Windows Settings, Scripts (Logon) and view the logon scripts. What do you see? The correct Server 2008 path, or the old Server 2000 path?

-Matt
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Actually... just clarify something for me. Are the logon scripts set via Group Policy or as a logon script on each user's profile?

-Matt
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
They have always been assigned via the user's profile, I've since tried to set them via group policy with no luck. I don't see any scripts container under User Configuration -> Windows Settings.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

What is the exact path set for the logon script?
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
\\file-server\SYSVOL\<domain>\scripts
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

And \\file-server is another server, not the Windows 2000 box?
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
file-server is the 2008 server, correct.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

Okay, that's fine.

What happens if you browse to \\file-server\SYSVOL\domain\scripts from a client workstation, and attempt to manually run the logon script. Do you experience any issues doing so?
0
Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

 
LVL 1

Author Comment

by:DarkHound
Comment Utility
no there is no problem manually doing it.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

Okay, what OS is running on the workstations?

Could you post a copy of the script here?
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
Mostly windows xp. A couple of 2000 workstations. The script itself is a kix script. I've attached it as code below. It's called using "WKIX32.EXE login.kix" in the login script field.
;**** Last Modified on 1-3-2006  by Joe Etten ****
 

$SERVER = "FILE-SERVER" ;Assign the server name to the variable $SERVER
 

If @USERID = "pathadmin" 

   exit 0

EndIf
 

;If @USERID = "jetten" 

;   $SERVER = "FILE-SERVER";

;   sleep 10

;   ? "Pausing for 10 seconds cause I'm cool like that..."

;

;EndIf
 

Use U: "\\$SERVER\@USERID_pathserver" ; Use this line if you simply want to map to a share based on their username.  
 
 

If InGroup ("TermSrvUsers") ;If in the terminal server group, don't map anything else. Just exit.

    exit 0

EndIf
 

Use P: "\\$SERVER\Public_pathserver" ;You can also map other drives
 

If InGroup ("accounting") ;If your in the accounting group  

Use G: "\\$SERVER\accounting_pathserver" ;Map this drive

EndIf
 

If InGroup ("HIPAA") ;If your in the HIPAA group  

Use H: "\\$SERVER\HIPAA_pathserver" ;Map this drive

EndIf
 

If InGroup ("FinHK") ;If your in the Fin Housekeeping group  

Use I: "\\$SERVER\FinHK_pathserver" ;Map this drive

EndIf
 

If InGroup ("LabHK") ;If your in the Lab Housekeeping group  

Use J: "\\$SERVER\LabHK_pathserver" ;Map this drive

EndIf
 

If InGroup ("CashBatch") ;If your in the Cash Batch group  

Use K: "\\$SERVER\CashBatch_pathserver" ;Map this drive

EndIf
 

If InGroup ("ProxyMed") ;If your in the Cash Batch group  

Use L: "\\$SERVER\proxymed_pathserver" ;Map this drive

EndIf
 

If InGroup ("MedRecRel") ;If your in the Medical Records Release group  

Use M: "\\$SERVER\MedRecRel_pathserver" ;Map this drive

EndIf
 

If InGroup ("nikkishare") ;If your in the Nikkishare group  

Use N: "\\$SERVER\nikkishare_pathserver" ;Map this drive

EndIf
 

If InGroup ("Supplies") ;If your in the Supplies group  

Use S: "\\$SERVER\supplies_pathserver" ;Map this drive

EndIf
 

If InGroup ("KKSOld") ;If your in the KKSOld Files group  

Use Q: "\\$SERVER\kksold_pathserver" ;Map this drive

EndIf
 

ADDPRINTERCONNECTION ("\\cop_print\Admin_Copier")

   ? "Added Administration Copier...."
 

ADDPRINTERCONNECTION ("\\cop_print\CltSvc_Copier")

   ? "Added Client Service Copier...."
 

; === Add Sceris URL ===

;copy "\\pathserver\public\apps\Sceris.url" "C:\Documents and Settings\All Users\Desktop\"
 
 

; ===Commented out until needed again.===

;If InGroup ("MisysUsers")

;New Smarterm Session install Script. 

; make directory and copy files to directory

;md "c:\sessions"

;copy "\\pathserver\public\apps\smarterm\MisysLogin.stw" "c:\sessions\"

;copy "\\pathserver\public\apps\smarterm\MisysLogin.lnk" "C:\Documents and Settings\All Users\Desktop\"

;EndIf

;==========Load Track-IT Auditing agent========

;run "\\pathserver\TrackIt70\Audit32.exe"
 

;run "\\pathserver\public\apps\DST\DaylightSavingFix.exe /qinstall"

Open in new window

0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

I've never played with Kix myself, so I'm new to it. Is WKIX32.EXE a tool you load from the network share?
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
yes it's in the same share as the script
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
Comment Utility

How about if you define the logon script path explicitly?

\\file-server\SYSVOL\domain\scripts\WKIX32.exe "\\file-server\SYSVOL\domain\scripts\login.kix"
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
Yes if I explicitly define the login script path it will work. I guess that will have to do for now. Thanks for the help Matt.
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
well.. I spoke too soon. It worked once on one computer, but when I tried it on mine. I get nothing.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

I take it you're using an account which has had the script path updated? :-)
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
Well it works intermittently.. Let's do this another way. What is the best way to set up a login script these days?
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility

I like your thinking :-)

Kix scripts are generally being phased out these days, which is probably the reason why I've not had chance to play with them in the environments in which I work. Today, for doing things like mapping drives, printers and so on, the best approach is to push Group Policy Preferences from a Windows 2008 machine. See the overview at http://www.microsoft.com/downloads/details.aspx?FamilyID=42E30E3F-6F01-4610-9D6E-F6E0FB7A0790&displaylang=en for more information on this feature.

-Matt
0
 
LVL 1

Author Comment

by:DarkHound
Comment Utility
Well I think I solved it.. for some reason policies aren't replicating from one server to the other. I ended up manually copying the policy from one server to the other (The actual folder holding the GPT.ini.) Once I did the scripts just started working again. I'm still going to look into the GPO way of doing it, in the near future.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now