Yeah, but.... I haven't seen that happen, but not that it can't.

It almost sounds like there are conflicting policies somewhere.

------------------------------------------------------
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis - Formerly Harbinger and Extricity
Atlanta, GA


> -----Original Message-----
> From: Chris Levis [mailto:[EMAIL PROTECTED]] 
> Sent: Thursday, October 10, 2002 10:15 AM
> To: NT 2000 Discussions
> Subject: RE: Our Logon scripts not running
> 
> 
> Here's more info:  I just tried something.
> 
> I moved a test user out of his OU and made a new OU that blocks any
> inherited policy.  I applied the setup_security.inf template, 
> and went ahead
> and logged into one of the problem machines (i.e., one on 
> which scripts
> weren't running).  The logon script ran.
> 
> I hadn't made any changes to the GPO, and my boss said that he hadn't
> either... Could the particular GPO have gone corrupt?
> 
> 
> 
> > -----Original Message-----
> > From: Roger Seielstad [mailto:[EMAIL PROTECTED]] 
> > Sent: Thursday, October 10, 2002 10:06 AM
> > To: NT 2000 Discussions
> > Subject: RE: Our Logon scripts not running
> > 
> > 
> > Start by getting rid of Kixtart and just try a plain .cmd or 
> > .bat file and see if they still run.
> > 
> > ------------------------------------------------------
> > Roger D. Seielstad - MCSE
> > Sr. Systems Administrator
> > Inovis - Formerly Harbinger and Extricity
> > Atlanta, GA
> > 
> > 
> > > -----Original Message-----
> > > From: Chris Levis [mailto:[EMAIL PROTECTED]]
> > > Sent: Thursday, October 10, 2002 9:50 AM
> > > To: NT 2000 Discussions
> > > Subject: Our Logon scripts not running
> > > 
> > > 
> > > Env't = Win2k, AD.  All clients are Win2k.
> > > 
> > > All of a sudden, users' logon scripts are not running on
> > > certain machines.
> > > 
> > > As it happens, most of the complaints are coming from laptop
> > > users (i.e.,
> > > users who shut their machines down fairly often).
> > > 
> > > Allow me to present a scenario:
> > > --------------------
> > > There are two users; Chris and Joan.  Chris has a Desktop.  
> > Joan has a 
> > > laptop.  Both Chris and Joan are in the same OU, and 
> their machines 
> > > are in the same OU.
> > > 
> > > When Joan logs into her laptop, her script does not run.
> > > When Chris logs
> > > into Joan's laptop, his script doesn't run.
> > > 
> > > Conversely, when Chris logs into Chris' computer, the script
> > > runs.  When
> > > Joan logs into Chris' computer, her script runs.
> > > 
> > > On his desktop, Chris runs secedit with /ENFORCE on both
> > > machine and user
> > > policies, waits 15 minutes, and tries logging in again.  No 
> > > effect to the
> > > above statements.
> > > --------------------
> > > 
> > > Chris and Joan are symbolic; the same situation is going on
> > > for most of the
> > > users.
> > > 
> > > I don't have the logon scripts specified in the GPO.  
> Instead, it's 
> > > specified in the "logon script" field of each user's 
> > properties.  It's 
> > > a .bat that runs a Kixtart script.
> > > 
> > > I pulled this error out of the laptops' logs, if it looks 
> familiar:
> > > Event Type:       Error
> > > Event Source:     SceCli
> > > Event Category:   None
> > > Event ID: 1001
> > > Date:             10/9/2002
> > > Time:             9:32:01 AM
> > > User:             N/A
> > > Computer: DEVWRK01
> > > Description:
> > > Security policy cannot be propagated. Cannot access the
> > > template. Error code
> > > = 3.
> > >   
> > \\appgeo.com\sysvol\appgeo.com\Policies\{31B2F340-016D-11D2-94
> 5F-00C04FB984F
> 9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf. 
> 
> 
> Thanks a lot for any and all guidance!
> 
> 
> 
> 
> 
> ___________________________
> Chris Levis
> Applied Geographics, Inc.
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to %%email.unsub%%
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to %%email.unsub%%
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to %%email.unsub%%
> 

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to