Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » On one PC no user runs logon script
On one PC no user runs logon script [message #156699] Tue, 23 June 2009 15:13 Go to next message
MC Murphy  is currently offline MC Murphy
Messages: 9
Registered: September 2009
Junior Member
Windows Server 2003 domain and servers. Users and computers in an OU. Logon
script in a GPO linked to the OU. On almost all PCs anyone logs on, the
logon script runs (drives and printers). On one PC anyone logs on, no logon
script. I've removed the PC from the domain, added it back again, no change.
I've set UserEnvDebugLevel on the bad one and a test good one. In both logs
I see authentication, GPO processing, no errors that don't appear in both.
In the good one's log I see "LibMain: Process Name:
C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no good
explanation why. I'd reformat and forget it, but I actually have two
instances of this, and want to figure it out in case it spreads. Any ideas?
Other diags I can try?
Re: On one PC no user runs logon script [message #156711 is a reply to message #156699] Tue, 23 June 2009 19:40 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
CaAn you run the script when you logon? What is that the script does?

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
> Windows Server 2003 domain and servers. Users and computers in an OU.
> Logon
> script in a GPO linked to the OU. On almost all PCs anyone logs on, the
> logon script runs (drives and printers). On one PC anyone logs on, no
> logon
> script. I've removed the PC from the domain, added it back again, no
> change.
> I've set UserEnvDebugLevel on the bad one and a test good one. In both
> logs
> I see authentication, GPO processing, no errors that don't appear in both.
> In the good one's log I see "LibMain: Process Name:
> C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no good
> explanation why. I'd reformat and forget it, but I actually have two
> instances of this, and want to figure it out in case it spreads. Any
> ideas?
> Other diags I can try?
Re: On one PC no user runs logon script [message #156728 is a reply to message #156711] Wed, 24 June 2009 08:28 Go to previous messageGo to next message
MC Murphy  is currently offline MC Murphy
Messages: 9
Registered: September 2009
Junior Member
Yes, I can browse to a SYSVOL, find the script and run it. It looks up the
groups the user account is in, and maps drives based on them, and on some
environment variables. It attaches network printers, based on computer
name. It writes out a log file on a network folder of the mapping and
attaching it does. And all that works, just the script doesn't execute while
the user is logging onto this computer. Logon does the folder redirection -
Application Data, Desktop, and My Documents - which is in the same GPO as the
logon script. I've checked that the same logon.vbs is in all SYSVOL's, so
DC's are synchronizing.

"Jorge Silva" wrote:

> Hi
> CaAn you run the script when you logon? What is that the script does?
>
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
> > Windows Server 2003 domain and servers. Users and computers in an OU.
> > Logon
> > script in a GPO linked to the OU. On almost all PCs anyone logs on, the
> > logon script runs (drives and printers). On one PC anyone logs on, no
> > logon
> > script. I've removed the PC from the domain, added it back again, no
> > change.
> > I've set UserEnvDebugLevel on the bad one and a test good one. In both
> > logs
> > I see authentication, GPO processing, no errors that don't appear in both.
> > In the good one's log I see "LibMain: Process Name:
> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no good
> > explanation why. I'd reformat and forget it, but I actually have two
> > instances of this, and want to figure it out in case it spreads. Any
> > ideas?
> > Other diags I can try?
>
Re: On one PC no user runs logon script [message #156736 is a reply to message #156728] Wed, 24 June 2009 10:42 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Ok,
If the user is in a slow link network check the following policy:
Computer->Policies->Administrative Templates -> System -> Group Policy ->
Scripts policy processing.
Also check
User->Policies->Administrative Templates -> System -> Scrips-> Run Logon
scripts synchronously.

If possible try to log all actions that the script does to a local log file,
additionaly review if that user has permissions to do everything that the
script is attempting to do.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
news:B8737E84-AAA6-4B3E-B452-D4B030F0CB5B@microsoft.com...
> Yes, I can browse to a SYSVOL, find the script and run it. It looks up
> the
> groups the user account is in, and maps drives based on them, and on some
> environment variables. It attaches network printers, based on computer
> name. It writes out a log file on a network folder of the mapping and
> attaching it does. And all that works, just the script doesn't execute
> while
> the user is logging onto this computer. Logon does the folder
> redirection -
> Application Data, Desktop, and My Documents - which is in the same GPO as
> the
> logon script. I've checked that the same logon.vbs is in all SYSVOL's, so
> DC's are synchronizing.
>
> "Jorge Silva" wrote:
>
>> Hi
>> CaAn you run the script when you logon? What is that the script does?
>>
>> --
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MVP Directory Services
>> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
>> > Windows Server 2003 domain and servers. Users and computers in an OU.
>> > Logon
>> > script in a GPO linked to the OU. On almost all PCs anyone logs on,
>> > the
>> > logon script runs (drives and printers). On one PC anyone logs on, no
>> > logon
>> > script. I've removed the PC from the domain, added it back again, no
>> > change.
>> > I've set UserEnvDebugLevel on the bad one and a test good one. In both
>> > logs
>> > I see authentication, GPO processing, no errors that don't appear in
>> > both.
>> > In the good one's log I see "LibMain: Process Name:
>> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no good
>> > explanation why. I'd reformat and forget it, but I actually have two
>> > instances of this, and want to figure it out in case it spreads. Any
>> > ideas?
>> > Other diags I can try?
>>
Re: On one PC no user runs logon script [message #156744 is a reply to message #156736] Wed, 24 June 2009 14:01 Go to previous messageGo to next message
MC Murphy  is currently offline MC Murphy
Messages: 9
Registered: September 2009
Junior Member
Not in a slow link, though I have enabled "Allow processing across a slow
network connection". I have now enabled "Run logon scripts synchronously",
and will test. For the next point - 1) I already log most of what the script
does; 2) on another computer, same OU, same user, logon script runs through
successfully. That's why I'm convinced it's computer-related, not
user-related.

"Jorge Silva" wrote:

> Ok,
> If the user is in a slow link network check the following policy:
> Computer->Policies->Administrative Templates -> System -> Group Policy ->
> Scripts policy processing.
> Also check
> User->Policies->Administrative Templates -> System -> Scrips-> Run Logon
> scripts synchronously.
>
> If possible try to log all actions that the script does to a local log file,
> additionaly review if that user has permissions to do everything that the
> script is attempting to do.
>
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> news:B8737E84-AAA6-4B3E-B452-D4B030F0CB5B@microsoft.com...
> > Yes, I can browse to a SYSVOL, find the script and run it. It looks up
> > the
> > groups the user account is in, and maps drives based on them, and on some
> > environment variables. It attaches network printers, based on computer
> > name. It writes out a log file on a network folder of the mapping and
> > attaching it does. And all that works, just the script doesn't execute
> > while
> > the user is logging onto this computer. Logon does the folder
> > redirection -
> > Application Data, Desktop, and My Documents - which is in the same GPO as
> > the
> > logon script. I've checked that the same logon.vbs is in all SYSVOL's, so
> > DC's are synchronizing.
> >
> > "Jorge Silva" wrote:
> >
> >> Hi
> >> CaAn you run the script when you logon? What is that the script does?
> >>
> >> --
> >> I hope that the information above helps you.
> >> Have a Nice day.
> >>
> >> Jorge Silva
> >> MVP Directory Services
> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> >> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
> >> > Windows Server 2003 domain and servers. Users and computers in an OU.
> >> > Logon
> >> > script in a GPO linked to the OU. On almost all PCs anyone logs on,
> >> > the
> >> > logon script runs (drives and printers). On one PC anyone logs on, no
> >> > logon
> >> > script. I've removed the PC from the domain, added it back again, no
> >> > change.
> >> > I've set UserEnvDebugLevel on the bad one and a test good one. In both
> >> > logs
> >> > I see authentication, GPO processing, no errors that don't appear in
> >> > both.
> >> > In the good one's log I see "LibMain: Process Name:
> >> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no good
> >> > explanation why. I'd reformat and forget it, but I actually have two
> >> > instances of this, and want to figure it out in case it spreads. Any
> >> > ideas?
> >> > Other diags I can try?
> >>
>
Re: On one PC no user runs logon script [message #156758 is a reply to message #156744] Wed, 24 June 2009 20:00 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Okay, in that case test that account on a computer that works fine with
other accounts, then compare the configuration between them.
Good luck.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
news:35227F74-B072-4ED2-B1AE-1A0B04116B68@microsoft.com...
> Not in a slow link, though I have enabled "Allow processing across a slow
> network connection". I have now enabled "Run logon scripts
> synchronously",
> and will test. For the next point - 1) I already log most of what the
> script
> does; 2) on another computer, same OU, same user, logon script runs
> through
> successfully. That's why I'm convinced it's computer-related, not
> user-related.
>
> "Jorge Silva" wrote:
>
>> Ok,
>> If the user is in a slow link network check the following policy:
>> Computer->Policies->Administrative Templates -> System -> Group Policy ->
>> Scripts policy processing.
>> Also check
>> User->Policies->Administrative Templates -> System -> Scrips-> Run Logon
>> scripts synchronously.
>>
>> If possible try to log all actions that the script does to a local log
>> file,
>> additionaly review if that user has permissions to do everything that the
>> script is attempting to do.
>>
>> --
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MVP Directory Services
>> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> news:B8737E84-AAA6-4B3E-B452-D4B030F0CB5B@microsoft.com...
>> > Yes, I can browse to a SYSVOL, find the script and run it. It looks up
>> > the
>> > groups the user account is in, and maps drives based on them, and on
>> > some
>> > environment variables. It attaches network printers, based on
>> > computer
>> > name. It writes out a log file on a network folder of the mapping and
>> > attaching it does. And all that works, just the script doesn't execute
>> > while
>> > the user is logging onto this computer. Logon does the folder
>> > redirection -
>> > Application Data, Desktop, and My Documents - which is in the same GPO
>> > as
>> > the
>> > logon script. I've checked that the same logon.vbs is in all SYSVOL's,
>> > so
>> > DC's are synchronizing.
>> >
>> > "Jorge Silva" wrote:
>> >
>> >> Hi
>> >> CaAn you run the script when you logon? What is that the script does?
>> >>
>> >> --
>> >> I hope that the information above helps you.
>> >> Have a Nice day.
>> >>
>> >> Jorge Silva
>> >> MVP Directory Services
>> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> >> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
>> >> > Windows Server 2003 domain and servers. Users and computers in an
>> >> > OU.
>> >> > Logon
>> >> > script in a GPO linked to the OU. On almost all PCs anyone logs on,
>> >> > the
>> >> > logon script runs (drives and printers). On one PC anyone logs on,
>> >> > no
>> >> > logon
>> >> > script. I've removed the PC from the domain, added it back again,
>> >> > no
>> >> > change.
>> >> > I've set UserEnvDebugLevel on the bad one and a test good one. In
>> >> > both
>> >> > logs
>> >> > I see authentication, GPO processing, no errors that don't appear in
>> >> > both.
>> >> > In the good one's log I see "LibMain: Process Name:
>> >> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no
>> >> > good
>> >> > explanation why. I'd reformat and forget it, but I actually have
>> >> > two
>> >> > instances of this, and want to figure it out in case it spreads.
>> >> > Any
>> >> > ideas?
>> >> > Other diags I can try?
>> >>
>>
Re: On one PC no user runs logon script [message #156873 is a reply to message #156758] Thu, 25 June 2009 09:01 Go to previous messageGo to next message
MC Murphy  is currently offline MC Murphy
Messages: 9
Registered: September 2009
Junior Member
I can't say I understand why, but:
Yesterday in the Group Policy in question I added the setting
Computer->Policies->Administrative Templates -> System -> Scripts-> Run Logon
scripts synchronously

and since then the two computers that were most consistently failing to run
the logon script have run it successfully on every one of 6 or so tests.
Thanks.

"Jorge Silva" wrote:

> Okay, in that case test that account on a computer that works fine with
> other accounts, then compare the configuration between them.
> Good luck.
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MVP Directory Services
> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> news:35227F74-B072-4ED2-B1AE-1A0B04116B68@microsoft.com...
> > Not in a slow link, though I have enabled "Allow processing across a slow
> > network connection". I have now enabled "Run logon scripts
> > synchronously",
> > and will test. For the next point - 1) I already log most of what the
> > script
> > does; 2) on another computer, same OU, same user, logon script runs
> > through
> > successfully. That's why I'm convinced it's computer-related, not
> > user-related.
> >
> > "Jorge Silva" wrote:
> >
> >> Ok,
> >> If the user is in a slow link network check the following policy:
> >> Computer->Policies->Administrative Templates -> System -> Group Policy ->
> >> Scripts policy processing.
> >> Also check
> >> User->Policies->Administrative Templates -> System -> Scrips-> Run Logon
> >> scripts synchronously.
> >>
> >> If possible try to log all actions that the script does to a local log
> >> file,
> >> additionaly review if that user has permissions to do everything that the
> >> script is attempting to do.
> >>
> >> --
> >> I hope that the information above helps you.
> >> Have a Nice day.
> >>
> >> Jorge Silva
> >> MVP Directory Services
> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> >> news:B8737E84-AAA6-4B3E-B452-D4B030F0CB5B@microsoft.com...
> >> > Yes, I can browse to a SYSVOL, find the script and run it. It looks up
> >> > the
> >> > groups the user account is in, and maps drives based on them, and on
> >> > some
> >> > environment variables. It attaches network printers, based on
> >> > computer
> >> > name. It writes out a log file on a network folder of the mapping and
> >> > attaching it does. And all that works, just the script doesn't execute
> >> > while
> >> > the user is logging onto this computer. Logon does the folder
> >> > redirection -
> >> > Application Data, Desktop, and My Documents - which is in the same GPO
> >> > as
> >> > the
> >> > logon script. I've checked that the same logon.vbs is in all SYSVOL's,
> >> > so
> >> > DC's are synchronizing.
> >> >
> >> > "Jorge Silva" wrote:
> >> >
> >> >> Hi
> >> >> CaAn you run the script when you logon? What is that the script does?
> >> >>
> >> >> --
> >> >> I hope that the information above helps you.
> >> >> Have a Nice day.
> >> >>
> >> >> Jorge Silva
> >> >> MVP Directory Services
> >> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
> >> >> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
> >> >> > Windows Server 2003 domain and servers. Users and computers in an
> >> >> > OU.
> >> >> > Logon
> >> >> > script in a GPO linked to the OU. On almost all PCs anyone logs on,
> >> >> > the
> >> >> > logon script runs (drives and printers). On one PC anyone logs on,
> >> >> > no
> >> >> > logon
> >> >> > script. I've removed the PC from the domain, added it back again,
> >> >> > no
> >> >> > change.
> >> >> > I've set UserEnvDebugLevel on the bad one and a test good one. In
> >> >> > both
> >> >> > logs
> >> >> > I see authentication, GPO processing, no errors that don't appear in
> >> >> > both.
> >> >> > In the good one's log I see "LibMain: Process Name:
> >> >> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but no
> >> >> > good
> >> >> > explanation why. I'd reformat and forget it, but I actually have
> >> >> > two
> >> >> > instances of this, and want to figure it out in case it spreads.
> >> >> > Any
> >> >> > ideas?
> >> >> > Other diags I can try?
> >> >>
> >>
>
Re: On one PC no user runs logon script [message #157003 is a reply to message #156873] Mon, 29 June 2009 06:13 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Ok, great.
Per your description sounds like you have some app or script or anything
else that runs at logon and that action is probably interfering with the
script action. By running the scripts synchronously ensure that the logon
script is finished before running anything else isolating it from other
process at logon time.


--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
news:79F0064C-0B79-4A40-AD34-CB9A3F251411@microsoft.com...
>I can't say I understand why, but:
> Yesterday in the Group Policy in question I added the setting
> Computer->Policies->Administrative Templates -> System -> Scripts-> Run
> Logon
> scripts synchronously
>
> and since then the two computers that were most consistently failing to
> run
> the logon script have run it successfully on every one of 6 or so tests.
> Thanks.
>
> "Jorge Silva" wrote:
>
>> Okay, in that case test that account on a computer that works fine with
>> other accounts, then compare the configuration between them.
>> Good luck.
>> --
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MVP Directory Services
>> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> news:35227F74-B072-4ED2-B1AE-1A0B04116B68@microsoft.com...
>> > Not in a slow link, though I have enabled "Allow processing across a
>> > slow
>> > network connection". I have now enabled "Run logon scripts
>> > synchronously",
>> > and will test. For the next point - 1) I already log most of what the
>> > script
>> > does; 2) on another computer, same OU, same user, logon script runs
>> > through
>> > successfully. That's why I'm convinced it's computer-related, not
>> > user-related.
>> >
>> > "Jorge Silva" wrote:
>> >
>> >> Ok,
>> >> If the user is in a slow link network check the following policy:
>> >> Computer->Policies->Administrative Templates -> System -> Group
>> >> Policy ->
>> >> Scripts policy processing.
>> >> Also check
>> >> User->Policies->Administrative Templates -> System -> Scrips-> Run
>> >> Logon
>> >> scripts synchronously.
>> >>
>> >> If possible try to log all actions that the script does to a local log
>> >> file,
>> >> additionaly review if that user has permissions to do everything that
>> >> the
>> >> script is attempting to do.
>> >>
>> >> --
>> >> I hope that the information above helps you.
>> >> Have a Nice day.
>> >>
>> >> Jorge Silva
>> >> MVP Directory Services
>> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> >> news:B8737E84-AAA6-4B3E-B452-D4B030F0CB5B@microsoft.com...
>> >> > Yes, I can browse to a SYSVOL, find the script and run it. It looks
>> >> > up
>> >> > the
>> >> > groups the user account is in, and maps drives based on them, and on
>> >> > some
>> >> > environment variables. It attaches network printers, based on
>> >> > computer
>> >> > name. It writes out a log file on a network folder of the mapping
>> >> > and
>> >> > attaching it does. And all that works, just the script doesn't
>> >> > execute
>> >> > while
>> >> > the user is logging onto this computer. Logon does the folder
>> >> > redirection -
>> >> > Application Data, Desktop, and My Documents - which is in the same
>> >> > GPO
>> >> > as
>> >> > the
>> >> > logon script. I've checked that the same logon.vbs is in all
>> >> > SYSVOL's,
>> >> > so
>> >> > DC's are synchronizing.
>> >> >
>> >> > "Jorge Silva" wrote:
>> >> >
>> >> >> Hi
>> >> >> CaAn you run the script when you logon? What is that the script
>> >> >> does?
>> >> >>
>> >> >> --
>> >> >> I hope that the information above helps you.
>> >> >> Have a Nice day.
>> >> >>
>> >> >> Jorge Silva
>> >> >> MVP Directory Services
>> >> >> "MC Murphy" <MCMurphy@discussions.microsoft.com> wrote in message
>> >> >> news:27EA9C5B-D381-4A87-A5F1-2BFDA6BF6E80@microsoft.com...
>> >> >> > Windows Server 2003 domain and servers. Users and computers in
>> >> >> > an
>> >> >> > OU.
>> >> >> > Logon
>> >> >> > script in a GPO linked to the OU. On almost all PCs anyone logs
>> >> >> > on,
>> >> >> > the
>> >> >> > logon script runs (drives and printers). On one PC anyone logs
>> >> >> > on,
>> >> >> > no
>> >> >> > logon
>> >> >> > script. I've removed the PC from the domain, added it back
>> >> >> > again,
>> >> >> > no
>> >> >> > change.
>> >> >> > I've set UserEnvDebugLevel on the bad one and a test good one.
>> >> >> > In
>> >> >> > both
>> >> >> > logs
>> >> >> > I see authentication, GPO processing, no errors that don't appear
>> >> >> > in
>> >> >> > both.
>> >> >> > In the good one's log I see "LibMain: Process Name:
>> >> >> > C:\WINDOWS\System32\WScript.exe", in the bad one's I don't, but
>> >> >> > no
>> >> >> > good
>> >> >> > explanation why. I'd reformat and forget it, but I actually have
>> >> >> > two
>> >> >> > instances of this, and want to figure it out in case it spreads.
>> >> >> > Any
>> >> >> > ideas?
>> >> >> > Other diags I can try?
>> >> >>
>> >>
>>
Previous Topic:Getting acctinfo2.dll
Next Topic:Sharing FSMO roles between 2 DC's?
Goto Forum:
  


Current Time: Fri Oct 20 10:20:53 EDT 2017

Total time taken to generate the page: 0.04440 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software