?
Solved

Logon Script - GPO not working

Posted on 2009-05-08
7
Medium Priority
?
471 Views
Last Modified: 2012-05-06
I am trying to configure a logon script that runs on our computers when a user logs in. The script maps a network printer share to your local printers. The scrip runs fine if I run it locally from my machine (its a .vbs script). However it will not run as a logon script when added to our group plicy.

I have copied the script into the

domain\policies\{guid}\user\scripts\logon folder
I have also added the script name under user-configuration - scripts logon/logoff

I made these changes on the default domain policy GPO..
any thoughts?
0
Comment
Question by:FLVS_407
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 5

Expert Comment

by:QEMS
ID: 24336322
Have you tried RSOP to check if the policy is being applied?

Also you could try forcing the group policies to be applied to the machine using the command "gpupdate /force", you should then get a message stating that the machine has to be restarted before all policies can be applied - try again after that restart and see if anything changes.

Try RSOP after you try gpupdate, ask on here if you need help with RSOP.
0
 

Author Comment

by:FLVS_407
ID: 24336373
I am going to check out RSOP, I am totally new at GPO's never used them before.
I did try yesterday doing a gpupdate/force on both domain controllers and my laptop. That didn't help. I tried again this morning to see if maybe the group policy had not propagated yet. Still didn't work.

I am going to google around RSOP and see if that can help me out. Any additional comments or guidance would be much appreciated. We do not use any group policy right now. That's why I was making changes to the default domain policy. I figured that would apply?
0
 

Author Comment

by:FLVS_407
ID: 24336417
I ran RSOP from my machine, and under userconfiguration - windows settings I do not see the policy for logon/logoff scripts.

I am assuming the policy isn't being applied, how can I change that?
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 5

Expert Comment

by:QEMS
ID: 24336500
launch mmc (start -> run, then type "mmc")

add RSOP snap-in (file -> add/remove snap in, click add, choose resultant set of policy from the list, click add, click close, then click ok)

Generate the RSOP data:
right click Resultant set of policy in the left hand pane in the mmc window
choose "generate RSoP Data"
follow the wizard, choose "logging mode" (not planning mode)
Choose the target computer (select "another computer" and you can browse for the computer name or type it out manually)
Choose the user who you want to collect information for (if there are several users pick one who has logged on recently - preferably since you did gpupdate)

Let it generate the data and then you can see what policies have been applied to the user/computer
If you right click on either computer configuration or user configuration and choose properties, you then see a list of the policies that have been applied
0
 
LVL 5

Expert Comment

by:QEMS
ID: 24336541
A logon script should be visible under:
User configuration -> Windows Settings -> Scripts -> Logon

You should be able to see what the script is called, any parameters set, when it was last executed and which GPO called the logon script.
0
 
LVL 5

Accepted Solution

by:
QEMS earned 2000 total points
ID: 24336570
Check that the policy is correct, go to group policy management, select the correct GPO (in your case "default domain policy" - although I'd reccomend making a new policy unless you definately want this applied to everyone - including the administrator) look at the scope and settings for that policy and edit them if you need to.
0
 

Author Comment

by:FLVS_407
ID: 24338532
Thanks, turns out my default domain policy was not the one active. I found the correct policy that applied to my domain and made the changes there. Worked like a charm!
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question