RE: Problem with logon script, IE and group policy

Hello,

Thanks for posting!

It appears that this is a Development related request and would best be
addressed in the Developer newsgroups. Thank you for your understanding! I
have provided the link as below:

<http://msdn.microsoft.com/newsgroups/default.asp>

Or you may ask for developer support:
http://support.microsoft.com/directory/directory/phonepro.asp?sd=msdn

That newsgroup is primarily for issues involving development. We recommend
posting appropriately so you will get the most qualified pool of
respondents, and so other partners who regularly read the newsgroups can
either share their knowledge or learn from your interaction with us. Thank
you for your understanding!

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: "Ken Thomson" <someone@xxxxxxxxxxxxx>
| Subject: Problem with logon script, IE and group policy
| User-Agent: XanaNews/1.17.6.6
| MIME-Version: 1.0
| Content-Type: text/plain; charset=iso-8859-1
| Message-ID: <uViHdXU#FHA.2176@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups:
microsoft.public.scripting.vbscript,microsoft.public.windows.group_policy
| Date: Sun, 04 Dec 2005 18:44:49 -0800
| NNTP-Posting-Host: 61.8.5.101
| Lines: 1
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.group_policy:17696
microsoft.public.scripting.vbscript:179780
| X-Tomcat-NG: microsoft.public.windows.group_policy
|
| I have have a problem involving VBscript, Group Policy and Internet
| Explorer which I hope someone can help me with.
|
| The problem revolves around my VBscript logon script which uses an IE
| object to display an IE window containing our acceptable usage polcy.
| Form buttons on the IE screen allow a user to either accept the policy
| and continue or logout. For several years this script has been working
| fine on Windows 2000 clients and Windows XP clients. Currently I'm in
| the process of doing a new run-out of clients and re-designing our
| group policy implementation. With the new group policies in place the
| buttons on the IE screen no longer work when pressed, users are stuck
| and can only power-off the machine.
|
| The problem only occurs when I use group policy to set 'Always wait for
| the network at computer startup and logon' to enabled for XP clients.
| With it enabled; the IE buttons do not work, disabled; the IE buttons
| work.
|
| My guess at the cause is that some security setting is preventing me
| adding the script behaviours to the 2 form buttons. These security
| settings are being set by group policy. Hence, if group policy is
| forcably applied at logon, IE is preventing the button code from
| working. If group policy is not required to be applied at logon on XP
| clients, but rather applied after logon (as is the default), then those
| security settings are not in place during the running of the logon
| script - therefore the logon script including the acceptable user
| policy screen works perfectly as it always has.
|
| Where I am seeking assistance is:
| i) do others agree with my diagnosis?
| ii) can someone tell me what IE security zone my logon script generated
| IE page would be running in?
| iii) what group policy security settings could be preventing be from
| scripting the IE button behaviours?
|
| The code (heavily editied to show important sections) I use to get the
| IE buttons to work is :
|
| Set oAUPIE = CreateObject("InternetExplorer.Application")
| Set oDoc = oAUPIE.Document
|
| ' lots of oDoc.Writes to create the HTML page including 2 form buttons
| with ids of 'btnAccept' and 'btnDecline)
|
| oDoc.All("btnAccept").OnClick = GetRef("AUPAccept")
| oDoc.All("btnDecline").OnClick = GetRef("AUPDecline")
|
| Do
| WScript.Sleep 500
| DummyVal = oAUPIE.readystate
| If Err.Number <> 0 Then
| Logoff
| End If
| Loop Until blnAUPAccept
|
| 'blnAUPAccept is set by the AUPAccept subroutine
|
| Any assistance would be greatly appreciated.
|

.