FLVS_407
asked on
Logon Script - GPO not working
I am trying to configure a logon script that runs on our computers when a user logs in. The script maps a network printer share to your local printers. The scrip runs fine if I run it locally from my machine (its a .vbs script). However it will not run as a logon script when added to our group plicy.
I have copied the script into the
domain\policies\{guid}\use r\scripts\ logon folder
I have also added the script name under user-configuration - scripts logon/logoff
I made these changes on the default domain policy GPO..
any thoughts?
I have copied the script into the
domain\policies\{guid}\use
I have also added the script name under user-configuration - scripts logon/logoff
I made these changes on the default domain policy GPO..
any thoughts?
ASKER
I am going to check out RSOP, I am totally new at GPO's never used them before.
I did try yesterday doing a gpupdate/force on both domain controllers and my laptop. That didn't help. I tried again this morning to see if maybe the group policy had not propagated yet. Still didn't work.
I am going to google around RSOP and see if that can help me out. Any additional comments or guidance would be much appreciated. We do not use any group policy right now. That's why I was making changes to the default domain policy. I figured that would apply?
I did try yesterday doing a gpupdate/force on both domain controllers and my laptop. That didn't help. I tried again this morning to see if maybe the group policy had not propagated yet. Still didn't work.
I am going to google around RSOP and see if that can help me out. Any additional comments or guidance would be much appreciated. We do not use any group policy right now. That's why I was making changes to the default domain policy. I figured that would apply?
ASKER
I ran RSOP from my machine, and under userconfiguration - windows settings I do not see the policy for logon/logoff scripts.
I am assuming the policy isn't being applied, how can I change that?
I am assuming the policy isn't being applied, how can I change that?
launch mmc (start -> run, then type "mmc")
add RSOP snap-in (file -> add/remove snap in, click add, choose resultant set of policy from the list, click add, click close, then click ok)
Generate the RSOP data:
right click Resultant set of policy in the left hand pane in the mmc window
choose "generate RSoP Data"
follow the wizard, choose "logging mode" (not planning mode)
Choose the target computer (select "another computer" and you can browse for the computer name or type it out manually)
Choose the user who you want to collect information for (if there are several users pick one who has logged on recently - preferably since you did gpupdate)
Let it generate the data and then you can see what policies have been applied to the user/computer
If you right click on either computer configuration or user configuration and choose properties, you then see a list of the policies that have been applied
add RSOP snap-in (file -> add/remove snap in, click add, choose resultant set of policy from the list, click add, click close, then click ok)
Generate the RSOP data:
right click Resultant set of policy in the left hand pane in the mmc window
choose "generate RSoP Data"
follow the wizard, choose "logging mode" (not planning mode)
Choose the target computer (select "another computer" and you can browse for the computer name or type it out manually)
Choose the user who you want to collect information for (if there are several users pick one who has logged on recently - preferably since you did gpupdate)
Let it generate the data and then you can see what policies have been applied to the user/computer
If you right click on either computer configuration or user configuration and choose properties, you then see a list of the policies that have been applied
A logon script should be visible under:
User configuration -> Windows Settings -> Scripts -> Logon
You should be able to see what the script is called, any parameters set, when it was last executed and which GPO called the logon script.
User configuration -> Windows Settings -> Scripts -> Logon
You should be able to see what the script is called, any parameters set, when it was last executed and which GPO called the logon script.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
ASKER
Thanks, turns out my default domain policy was not the one active. I found the correct policy that applied to my domain and made the changes there. Worked like a charm!
Also you could try forcing the group policies to be applied to the machine using the command "gpupdate /force", you should then get a message stating that the machine has to be restarted before all policies can be applied - try again after that restart and see if anything changes.
Try RSOP after you try gpupdate, ask on here if you need help with RSOP.