Re: Startup Script create files on network

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 18:59:01 +0100

You have to seen the difference between Share Permissions and NTFS Security,

My advice here is to give the SYSTEM account Full Control at the Share
Permission for the particular share.

How ever I think the SYSTEM account always should have the right to create
files and folder to the local computer.

Share Permission is the problem here I think. 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"BoomStick" <jared_luker-remove this-@bigfoot.com> skrev i meddelandet
news:ew%237LaV$DHA.3852@TK2MSFTNGP10.phx.gbl...
> I have a GPO in place that defines the startup script as
> LGStartupRedirect.vbs.
>
> That script just calls a script on my machine (startup.vbs).  I don't have
> change rights to the SYSVOL or NETLOGON directories, so I need to have
this
> script redirected so that I can make changes whenever I want.
>
> The script that's on my machine DOES execute, because I have a
wscript.echo
> statement that does pop up before I get the login screen.  The scrpt
> performs all actions EXCEPT creating that text file on one of my file
> servers.
>
> I give SYSTEM change permissions on the folder.
>
> One weird thing I noticed is that when I add "system" to the names for
> rights and hit Check Name, it shows the picture of a user with a red arrow
> going up.  But when I look at the SYSTEM in the permissions window, the
icon
> looks like a group icon.
>
> I'm also currious... Why is it that I can run setup.exe for office2003
> through the login script and it can access my network resource for read,
but
> when I want to write to a network resource it does not do it.
>
> I just added a file check statement into my script to see if it would be
> able to read that particular directory.  I said that if computername.txt
> existed to pop up a message, and it did not pop up a message.  I would
seem
> that the startup script does not have read or write access to that network
> share for some reason.
>
> Weird...
>
> Jared
>
> "Chriss3" <noSpamHere@chrisse.se> wrote in message
> news:%23apvQyU$DHA.1456@TK2MSFTNGP09.phx.gbl...
> > The SYSTEM account should work. tell us the steps you take exactly to
> define
> > your startup script.
> >
> > thanks.
> >
> > -- 
> > Regards
> > Christoffer Andersson
> >
> > No email replies please - reply in the newsgroup
> >
> > "BoomStick" <jared_luker-remove this-@bigfoot.com> skrev i meddelandet
> > news:uJKvh5K$DHA.2804@tk2msftngp13.phx.gbl...
> > > Unless I did it wrong, that did not work.  The reason I question it,
is
> > the
> > > only account on the domain that was called "system" had some sort of
> weird
> > > icon on it.  But I added it to the NTFS permissions and I still don't
> get
> > a
> > > text file there.
> > >
> > > Jared
> > >
> > > "Chriss3" <noSpamHere@chrisse.se> wrote in message
> > > news:O1JnP6I$DHA.2432@TK2MSFTNGP11.phx.gbl...
> > > > System I suppose Startup scripts running under System Account.
> > > >
> > > > -- 
> > > > Regards
> > > > Christoffer Andersson
> > > >
> > > > No email replies please - reply in the newsgroup
> > > >
> > > > "BoomStick" <jared_luker-remove this-@bigfoot.com> skrev i
meddelandet
> > > > news:%23LlX1jI$DHA.2180@TK2MSFTNGP09.phx.gbl...
> > > > > Hey all,
> > > > >
> > > > > I was wondering if anyone knows what permissons need to be set on
a
> > > > network
> > > > > share/folder to allow a startup script to create a file as it is
> > > > executing.
> > > > >
> > > > > For example, I like to create a text file for each machine on a
> folder
> > > on
> > > > my
> > > > > server that represents if something did or did not happen in the
> > startup
> > > > > script.  I just want to be able to record those files during the
> > startup
> > > > > script.  I know the script that creates the files works fine
because
> I
> > > can
> > > > > execute it while I'm logged on and it will create the file.  I
just
> > does
> > > > not
> > > > > do it during the startup script.
> > > > >
> > > > > Any suggestions you could give me would be most appreciated...
> > > > >
> > > > > Jared
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Active Directory Computer Attributes
    ... I had grant permissions to Domain Computers to write all properties for all ... If I use a startup script to update the comments attribute, ... the computer object should have rights ...
    (microsoft.public.scripting.vbscript)
  • Re: Startup Script create files on network
    ... Permissions weren't the problem at all. ... Apparently startup scripts either don't like the alias, ... > My advice here is to give the SYSTEM account Full Control at the Share ... >> script redirected so that I can make changes whenever I want. ...
    (microsoft.public.win2000.group_policy)
  • Re: Deny _WRITE_ access to a file
    ... > trying to talk about was a STARTUP script (if I'm not mistaken, ... > script runs as BUILTIN\SYSTEM). ... If it is possible to script a permissions change such that the ... folder remains read/write for everyone except for the restricted group who ...
    (microsoft.public.security)
  • Re: Deny _WRITE_ access to a file
    ... > trying to talk about was a STARTUP script (if I'm not mistaken, ... > script runs as BUILTIN\SYSTEM). ... If it is possible to script a permissions change such that the ... folder remains read/write for everyone except for the restricted group who ...
    (microsoft.public.win2000.security)
  • Re: Deny _WRITE_ access to a file
    ... > trying to talk about was a STARTUP script (if I'm not mistaken, ... > script runs as BUILTIN\SYSTEM). ... If it is possible to script a permissions change such that the ... folder remains read/write for everyone except for the restricted group who ...
    (microsoft.public.windows.server.security)
Loading