Cannot get logon scripts to work

I have read through dozens of prevous posts here and in other
areas/forums.

Task: I need to used logon scripts to a) map networks drives (they don't
always remap during next logon or users disconnect them) b) sync time to
keep all workstations on the same server clock. c) (future script)
configure specific mapped network drives based on groups they belong to.

Server (only 1): Win 2003, AD DC, Exchange 2003, DNS, DHCP, Static IP
Server was: Win NT
Workstations: Win98SE, WinXP Pro Dynamic/Staic IPs

Problem: Cannot get map.bat script to run on logon.

Script contents:
@ECHO ON
@ECHO Connecting PECO network drives...
NET USE F: /d
NET USE F: \\DC1\COMPANY
NET USE K: /d
NET USE K: \\DC1\ACT
@ECHO OFF
REM Poor man's sleep on nect line, allows user to see what is going on
ping -n 3 127.0.0.1>nul
@ECHO ON

As you can see fairly basic old school. This script works fine running
manually.

I will be adding "net time \\dc1 /set /Y" later.

1st Tried this:
Since I only have a dozen users I added \\dc1\company\map.bat in the logon
script under a user account domain user manager. Didn't work.


2nd Tried this:
Looked at using group policy for the domain.
in an MMC added the group policy for domains, added under
users/windows/logon added map.bat, clicked on show files and copied the
script there. Didn't work. Also tried copying it into other logon script
folders under the sysvol directory.

To check this out I opened MMC and used the resolve group policy snap in.
I selected a computer and user that is currently logged in and the
user/windows/logon showed the map.bat script. What is not working?

just put map.bat into the netlogon share and point all the user account
logon script to map.bat.
should work.

--
Steven Cooke


"mstainbrook" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) lkaboutsoftware.com...
> I have read through dozens of prevous posts here and in other
> areas/forums.
>
> Task: I need to used logon scripts to a) map networks drives (they don't
> always remap during next logon or users disconnect them) b) sync time to
> keep all workstations on the same server clock. c) (future script)
> configure specific mapped network drives based on groups they belong to.
>
> Server (only 1): Win 2003, AD DC, Exchange 2003, DNS, DHCP, Static IP
> Server was: Win NT
> Workstations: Win98SE, WinXP Pro Dynamic/Staic IPs
>
> Problem: Cannot get map.bat script to run on logon.
>
> Script contents:
> @ECHO ON
> @ECHO Connecting PECO network drives...
> NET USE F: /d
> NET USE F: \\DC1\COMPANY
> NET USE K: /d
> NET USE K: \\DC1\ACT
> @ECHO OFF
> REM Poor man's sleep on nect line, allows user to see what is going on
> ping -n 3 127.0.0.1>nul
> @ECHO ON
>
> As you can see fairly basic old school. This script works fine running
> manually.
>
> I will be adding "net time \\dc1 /set /Y" later.
>
> 1st Tried this:
> Since I only have a dozen users I added \\dc1\company\map.bat in the logon
> script under a user account domain user manager. Didn't work.
>
>
> 2nd Tried this:
> Looked at using group policy for the domain.
> in an MMC added the group policy for domains, added under
> users/windows/logon added map.bat, clicked on show files and copied the
> script there. Didn't work. Also tried copying it into other logon script
> folders under the sysvol directory.
>
> To check this out I opened MMC and used the resolve group policy snap in.
> I selected a computer and user that is currently logged in and the
> user/windows/logon showed the map.bat script. What is not working?
>

I tried that. Nothing happens. No Error. No Nothing. I would imagine
that a window would open and I would see the script run.

Any other suggestions?

mstainbrook wrote:
> I have read through dozens of prevous posts here and in other
> areas/forums.
>
> Task: I need to used logon scripts to a) map networks drives (they
> don't always remap during next logon or users disconnect them) b)
> sync time to keep all workstations on the same server clock. c)
> (future script) configure specific mapped network drives based on
> groups they belong to.
>
> Server (only 1): Win 2003, AD DC, Exchange 2003, DNS, DHCP, Static IP
> Server was: Win NT
> Workstations: Win98SE, WinXP Pro Dynamic/Staic IPs
>
> Problem: Cannot get map.bat script to run on logon.
> I will be adding "net time \\dc1 /set /Y" later.

don't do that for XP Clients. They have their own time sync mechanics.

> 1st Tried this:
> Since I only have a dozen users I added \\dc1\company\map.bat in the
> logon script under a user account domain user manager. Didn't work.
>

Leave the path away. Simply write map.bat

> 2nd Tried this:
> Looked at using group policy for the domain.
> in an MMC added the group policy for domains, added under
> users/windows/logon added map.bat, clicked on show files and copied
> the script there. Didn't work. Also tried copying it into other
> logon script folders under the sysvol directory.

Windows 98 Clients will ignore GPO based scripts.

And btw: I have seen various situations (in an NT Domain), that the Login
script wasn't executed, if the user was member of the Administrators group.
Best greetings from Germany
Olaf.

Ok, map.bat works fine now in the logon script in the user properties in
thge user manager. but...

XP workstations are still not working. I have had to add each of the
users assigned to each workstation to the local compueter administrator's
group for that workstation to allow them to install some programs and run
some other programs such as ACT.

You think this may be preventing them from using tyhe Group policies? I
just think I'm missing something to get the policies working.

Also, only one of the multiple XP internal time sync is working right and
I that is why I needed to add net time in the script.

mstainbrook wrote:
> XP workstations are still not working. I have had to add each of the
> users assigned to each workstation to the local compueter
> administrator's group for that workstation to allow them to install
> some programs and run some other programs such as ACT.
>
> You think this may be preventing them from using tyhe Group policies?
> I just think I'm missing something to get the policies working.
>
.... at least this prevents _me_ from executing any login script in a NT
Domain.
So you should find also ways to let the programs to be installed without
needing Administrator account permissions - software deployment service or a
batch made with runas credits and a temporary admin account/password combo
may be a solution.
http://labmice.techtarget.com/active...ellimirror.htm lists a lot
of interesting articles about Intellimirror functionality.
For many tasks also local Power User permissions are enough.

For running a ancient application which is not aware about security you
should have a look, where exactly in file system and registry needs access
to and only free up the permissions here.
Admin permissions for everyone cause only headache for you on long term and
ignorance to even a minimum of IT guidelines by the users.
Best greetings from Germany
Olaf.