Solved

Logon Script - GPO not working

Posted on 2009-05-08
7
465 Views
Last Modified: 2012-05-06
I am trying to configure a logon script that runs on our computers when a user logs in. The script maps a network printer share to your local printers. The scrip runs fine if I run it locally from my machine (its a .vbs script). However it will not run as a logon script when added to our group plicy.

I have copied the script into the

domain\policies\{guid}\user\scripts\logon folder
I have also added the script name under user-configuration - scripts logon/logoff

I made these changes on the default domain policy GPO..
any thoughts?
0
Comment
Question by:FLVS_407
  • 4
  • 3
7 Comments
 
LVL 5

Expert Comment

by:QEMS
ID: 24336322
Have you tried RSOP to check if the policy is being applied?

Also you could try forcing the group policies to be applied to the machine using the command "gpupdate /force", you should then get a message stating that the machine has to be restarted before all policies can be applied - try again after that restart and see if anything changes.

Try RSOP after you try gpupdate, ask on here if you need help with RSOP.
0
 

Author Comment

by:FLVS_407
ID: 24336373
I am going to check out RSOP, I am totally new at GPO's never used them before.
I did try yesterday doing a gpupdate/force on both domain controllers and my laptop. That didn't help. I tried again this morning to see if maybe the group policy had not propagated yet. Still didn't work.

I am going to google around RSOP and see if that can help me out. Any additional comments or guidance would be much appreciated. We do not use any group policy right now. That's why I was making changes to the default domain policy. I figured that would apply?
0
 

Author Comment

by:FLVS_407
ID: 24336417
I ran RSOP from my machine, and under userconfiguration - windows settings I do not see the policy for logon/logoff scripts.

I am assuming the policy isn't being applied, how can I change that?
0
 
LVL 5

Expert Comment

by:QEMS
ID: 24336500
launch mmc (start -> run, then type "mmc")

add RSOP snap-in (file -> add/remove snap in, click add, choose resultant set of policy from the list, click add, click close, then click ok)

Generate the RSOP data:
right click Resultant set of policy in the left hand pane in the mmc window
choose "generate RSoP Data"
follow the wizard, choose "logging mode" (not planning mode)
Choose the target computer (select "another computer" and you can browse for the computer name or type it out manually)
Choose the user who you want to collect information for (if there are several users pick one who has logged on recently - preferably since you did gpupdate)

Let it generate the data and then you can see what policies have been applied to the user/computer
If you right click on either computer configuration or user configuration and choose properties, you then see a list of the policies that have been applied
0
 
LVL 5

Expert Comment

by:QEMS
ID: 24336541
A logon script should be visible under:
User configuration -> Windows Settings -> Scripts -> Logon

You should be able to see what the script is called, any parameters set, when it was last executed and which GPO called the logon script.
0
 
LVL 5

Accepted Solution

by:
QEMS earned 500 total points
ID: 24336570
Check that the policy is correct, go to group policy management, select the correct GPO (in your case "default domain policy" - although I'd reccomend making a new policy unless you definately want this applied to everyone - including the administrator) look at the scope and settings for that policy and edit them if you need to.
0
 

Author Comment

by:FLVS_407
ID: 24338532
Thanks, turns out my default domain policy was not the one active. I found the correct policy that applied to my domain and made the changes there. Worked like a charm!
0

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Group policy not applying 5 29
Windows server 2008 5 33
Need to Modify a Script I found 5 77
Do we need servers??? 5 136
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now