Couple of issues with Server 2k3

I am having problems getting a batch file to run for the login script, the
problem is occuring on an NT 4 SP6 machine and a 2000 Pro machine, I have
run the batch file on the machine itself and it works fine, but it won't run
as a login script. I do have it located in the NETLOGON folder on the
server.

I am also having problems with logging another user into the server, I know
it is a local policy but I can't figure out which one.

The other problem I am haveing is setting up trusts between the 2K3 server
and NT 4 servers. They are connected over a frame relay, the subnet is the
same, the IPs are xxx.xxx.1.xxx for the 2k3 and xxx.xxx.2-5.xxx for the NT
4s. When I go to set up the trust it wants to set it up as a realm trust.
I have an NT 4 server at the same location as the 2k3 server that will set
up as a two-way trust, it's IP is xxx.xxx.1.xxx.

Thanks in advance for your input.

Eric

"Eric Graham" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I am having problems getting a batch file to run for the login script, the
> problem is occuring on an NT 4 SP6 machine and a 2000 Pro machine, I have
> run the batch file on the machine itself and it works fine, but it won't
run
> as a login script. I do have it located in the NETLOGON folder on the
> server.

You'll have to define "not run". Error messages? Part work and part fail?
What? What does the script do?


> I am also having problems with logging another user into the server, I
know
> it is a local policy but I can't figure out which one.

Too vague.

> The other problem I am haveing is setting up trusts between the 2K3 server
> and NT 4 servers. They are connected over a frame relay, the subnet is
the
> same, the IPs are xxx.xxx.1.xxx for the 2k3 and xxx.xxx.2-5.xxx for the NT
> 4s. When I go to set up the trust it wants to set it up as a realm trust.
> I have an NT 4 server at the same location as the 2k3 server that will set
> up as a two-way trust, it's IP is xxx.xxx.1.xxx.

Layer3 subnets and addressing aren't even related to this. For NT4's Domain
to establish a trust with Win2k or Win2k3 requires a common functioning WINS
Server that all the involved servers commonly use.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> "Eric Graham" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > I am having problems getting a batch file to run for the login script,
the
> > problem is occuring on an NT 4 SP6 machine and a 2000 Pro machine, I
have
> > run the batch file on the machine itself and it works fine, but it won't
> run
> > as a login script. I do have it located in the NETLOGON folder on the
> > server.
>
> You'll have to define "not run". Error messages? Part work and part
fail?
> What? What does the script do?

The script does nothing. It doesn't look like it even attepmts to run.
>
>
> > I am also having problems with logging another user into the server, I
> know
> > it is a local policy but I can't figure out which one.
>
> Too vague.

I have created a user I want to be ablr to log into the server, when I go to
log into the server with that account it tells me "The local policy of this
system does not permit you to logon interactivly".

Thanks for the quick response.
>
> > The other problem I am haveing is setting up trusts between the 2K3
server
> > and NT 4 servers. They are connected over a frame relay, the subnet is
> the
> > same, the IPs are xxx.xxx.1.xxx for the 2k3 and xxx.xxx.2-5.xxx for the
NT
> > 4s. When I go to set up the trust it wants to set it up as a realm
trust.
> > I have an NT 4 server at the same location as the 2k3 server that will
set
> > up as a two-way trust, it's IP is xxx.xxx.1.xxx.
>
> Layer3 subnets and addressing aren't even related to this. For NT4's
Domain
> to establish a trust with Win2k or Win2k3 requires a common functioning
WINS
> Server that all the involved servers commonly use.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>

"Eric Graham" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> > You'll have to define "not run". Error messages? Part work and part
> > fail? What? What does the script do?
>
> The script does nothing. It doesn't look like it even attepmts to run.

Is the script short enough that you could post its contents?

> > Too vague.
>
> I have created a user I want to be ablr to log into the server, when I go
to
> log into the server with that account it tells me "The local policy of
this
> system does not permit you to logon interactivly".

The account doesn't have "Log onto this Server Locally" rights. This is the
normal state of newly created accounts. Users are intended to connect to
resources on the Server by using other machines and not by sitting at the
Server itself. This is to keep "Mr. Joe Nobody" from sneeking into the
Server Room and being able to log into the machines directly.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Phillip Windell" <@.> wrote in message
news:%(E-Mail Removed)...
> "Eric Graham" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > > You'll have to define "not run". Error messages? Part work and part
> > > fail? What? What does the script do?
> >
> > The script does nothing. It doesn't look like it even attepmts to run.
>
> Is the script short enough that you could post its contents?
it is a very simple batch to map drives

net use h: \\servername\globel
net use s: \\servername\sbt
net use y: \\servername\shared

>
> > > Too vague.
> >
> > I have created a user I want to be ablr to log into the server, when I
go
> to
> > log into the server with that account it tells me "The local policy of
> this
> > system does not permit you to logon interactivly".
>
> The account doesn't have "Log onto this Server Locally" rights. This is
the
> normal state of newly created accounts. Users are intended to connect to
> resources on the Server by using other machines and not by sitting at the
> Server itself. This is to keep "Mr. Joe Nobody" from sneeking into the
> Server Room and being able to log into the machines directly.

Is the the "Log onto this Server Locally" the same as "Allow log on
locally"? which is under Computer Configuration, Windows Settings, Security
Settings, Local Policies, User Rights assignments?
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>

"Eric Graham" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> > Is the script short enough that you could post its contents?
> it is a very simple batch to map drives
>
> net use h: \\servername\globel
> net use s: \\servername\sbt
> net use y: \\servername\shared

Hmm....don't know. It would fail if the user logging in doesn't have the
right permission to the share on the server, but I don't know, I never use
mapped drive in a login script here. I always avoid mapped drives like a
plague. They slow the mchine down in any kind of Windows Explorer or File
Browse functions. There are too many better ways. It is always better to use
a Network Path rather than a drive letter.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com