Solved

Managed By Script Modification

Posted on 2011-09-16
9
700 Views
Last Modified: 2012-05-12
As a logoff script, we copy the last logged on user to the managed by attritbute for that computer account. When we rename the computer, we get an error in the script saying that the specified account does not exist. Then the computer takes 10 minutes to shut down the group policy client service.

How can the script be modified to prevent this?

Set objSysInfo = CreateObject("ADSystemInfo") 
Set objComputer = GetObject("LDAP://" & objSysInfo.ComputerName) 
 
objComputer.Put "managedBy", objSysInfo.Username 
objComputer.SetInfo

Open in new window

0
Comment
Question by:Joseph Moody
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 35

Expert Comment

by:YZlat
ID: 36551596
can I see your script for renaming computer?
0
 
LVL 22

Author Comment

by:Joseph Moody
ID: 36891644
I was referring to renaming a computer by hand. (for example, if a machine is moved to another location).
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37417214
Do you rename the account in Active Directory, or on the physical computer?  The only reason I can think that is says the computer doesn't exist, is maybe there's slow replication between your domain controllers, and they don't all have the same renamed computer account.  When you get this problem, connect to each DC and check whether the computer exists, and run this on the system:

Set objSysInfo = CreateObject("ADSystemInfo")
WScript.Echo "LDAP://" & objSysInfo.ComputerName

manually, to see whether the computer is correct.

Rob.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 13

Accepted Solution

by:
Daz_1234 earned 500 total points
ID: 37417234
Does it need to be done in the logoff script?  What's wrong with doing it in the logon script?

Daz.
0
 
LVL 22

Author Comment

by:Joseph Moody
ID: 37420220
It occurs when we renamed the account on the physical machine.

I will try it on logon to see. We are normally asked to keep scripts on logoff to help with the logon time.

0
 
LVL 13

Expert Comment

by:Daz_1234
ID: 37422627
I would think that the snippet you posted would be quick so it will not noticeably delay the logon process.

Let's see: Try this for testing:

t = timer
Set objSysInfo = CreateObject("ADSystemInfo") 
Set objComputer = GetObject("LDAP://" & objSysInfo.ComputerName) 
 
objComputer.Put "managedBy", objSysInfo.Username 
objComputer.SetInfo
Msgbox "took " & timer - t & " seconds."

Open in new window


Daz.
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37423854
Could you have different domain controllers that the PC might connect to that are not in sync?
0
 
LVL 22

Author Closing Comment

by:Joseph Moody
ID: 37446711
Script actually runs fast. Moved to user side
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
A brief introduction to what I consider to be the best editor for PowerShell.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question