Here's more info:  I just tried something.

I moved a test user out of his OU and made a new OU that blocks any
inherited policy.  I applied the setup_security.inf template, and went ahead
and logged into one of the problem machines (i.e., one on which scripts
weren't running).  The logon script ran.

I hadn't made any changes to the GPO, and my boss said that he hadn't
either... Could the particular GPO have gone corrupt?



> -----Original Message-----
> From: Roger Seielstad [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, October 10, 2002 10:06 AM
> To: NT 2000 Discussions
> Subject: RE: Our Logon scripts not running
> 
> 
> Start by getting rid of Kixtart and just try a plain .cmd or 
> .bat file and see if they still run.
> 
> ------------------------------------------------------
> Roger D. Seielstad - MCSE
> Sr. Systems Administrator
> Inovis - Formerly Harbinger and Extricity
> Atlanta, GA
> 
> 
> > -----Original Message-----
> > From: Chris Levis [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, October 10, 2002 9:50 AM
> > To: NT 2000 Discussions
> > Subject: Our Logon scripts not running
> > 
> > 
> > Env't = Win2k, AD.  All clients are Win2k.
> > 
> > All of a sudden, users' logon scripts are not running on
> > certain machines.
> > 
> > As it happens, most of the complaints are coming from laptop
> > users (i.e.,
> > users who shut their machines down fairly often).
> > 
> > Allow me to present a scenario:
> > --------------------
> > There are two users; Chris and Joan.  Chris has a Desktop.  
> Joan has a 
> > laptop.  Both Chris and Joan are in the same OU, and their machines 
> > are in the same OU.
> > 
> > When Joan logs into her laptop, her script does not run.
> > When Chris logs
> > into Joan's laptop, his script doesn't run.
> > 
> > Conversely, when Chris logs into Chris' computer, the script
> > runs.  When
> > Joan logs into Chris' computer, her script runs.
> > 
> > On his desktop, Chris runs secedit with /ENFORCE on both
> > machine and user
> > policies, waits 15 minutes, and tries logging in again.  No 
> > effect to the
> > above statements.
> > --------------------
> > 
> > Chris and Joan are symbolic; the same situation is going on
> > for most of the
> > users.
> > 
> > I don't have the logon scripts specified in the GPO.  Instead, it's 
> > specified in the "logon script" field of each user's 
> properties.  It's 
> > a .bat that runs a Kixtart script.
> > 
> > I pulled this error out of the laptops' logs, if it looks familiar:
> > Event Type: Error
> > Event Source:       SceCli
> > Event Category:     None
> > Event ID:   1001
> > Date:               10/9/2002
> > Time:               9:32:01 AM
> > User:               N/A
> > Computer:   DEVWRK01
> > Description:
> > Security policy cannot be propagated. Cannot access the
> > template. Error code
> > = 3.
> >     
> \\appgeo.com\sysvol\appgeo.com\Policies\{31B2F340-016D-11D2-94
5F-00C04FB984F
9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf. 


Thanks a lot for any and all guidance!





___________________________
Chris Levis
Applied Geographics, Inc.

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to