Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Logon Script - GPO not working

Posted on 2009-05-08
7
Medium Priority
?
472 Views
Last Modified: 2012-05-06
I am trying to configure a logon script that runs on our computers when a user logs in. The script maps a network printer share to your local printers. The scrip runs fine if I run it locally from my machine (its a .vbs script). However it will not run as a logon script when added to our group plicy.

I have copied the script into the

domain\policies\{guid}\user\scripts\logon folder
I have also added the script name under user-configuration - scripts logon/logoff

I made these changes on the default domain policy GPO..
any thoughts?
0
Comment
Question by:FLVS_407
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 5

Expert Comment

by:QEMS
ID: 24336322
Have you tried RSOP to check if the policy is being applied?

Also you could try forcing the group policies to be applied to the machine using the command "gpupdate /force", you should then get a message stating that the machine has to be restarted before all policies can be applied - try again after that restart and see if anything changes.

Try RSOP after you try gpupdate, ask on here if you need help with RSOP.
0
 

Author Comment

by:FLVS_407
ID: 24336373
I am going to check out RSOP, I am totally new at GPO's never used them before.
I did try yesterday doing a gpupdate/force on both domain controllers and my laptop. That didn't help. I tried again this morning to see if maybe the group policy had not propagated yet. Still didn't work.

I am going to google around RSOP and see if that can help me out. Any additional comments or guidance would be much appreciated. We do not use any group policy right now. That's why I was making changes to the default domain policy. I figured that would apply?
0
 

Author Comment

by:FLVS_407
ID: 24336417
I ran RSOP from my machine, and under userconfiguration - windows settings I do not see the policy for logon/logoff scripts.

I am assuming the policy isn't being applied, how can I change that?
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 5

Expert Comment

by:QEMS
ID: 24336500
launch mmc (start -> run, then type "mmc")

add RSOP snap-in (file -> add/remove snap in, click add, choose resultant set of policy from the list, click add, click close, then click ok)

Generate the RSOP data:
right click Resultant set of policy in the left hand pane in the mmc window
choose "generate RSoP Data"
follow the wizard, choose "logging mode" (not planning mode)
Choose the target computer (select "another computer" and you can browse for the computer name or type it out manually)
Choose the user who you want to collect information for (if there are several users pick one who has logged on recently - preferably since you did gpupdate)

Let it generate the data and then you can see what policies have been applied to the user/computer
If you right click on either computer configuration or user configuration and choose properties, you then see a list of the policies that have been applied
0
 
LVL 5

Expert Comment

by:QEMS
ID: 24336541
A logon script should be visible under:
User configuration -> Windows Settings -> Scripts -> Logon

You should be able to see what the script is called, any parameters set, when it was last executed and which GPO called the logon script.
0
 
LVL 5

Accepted Solution

by:
QEMS earned 2000 total points
ID: 24336570
Check that the policy is correct, go to group policy management, select the correct GPO (in your case "default domain policy" - although I'd reccomend making a new policy unless you definately want this applied to everyone - including the administrator) look at the scope and settings for that policy and edit them if you need to.
0
 

Author Comment

by:FLVS_407
ID: 24338532
Thanks, turns out my default domain policy was not the one active. I found the correct policy that applied to my domain and made the changes there. Worked like a charm!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Here's a look at newsworthy articles and community happenings during the last month.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question