Re: Startup Scripts & Permissions

On thing I would try right off the bat is to grant the "Domain Computers" group Read access to the share and the files under it, as opposed to Everyone. In other cases where this issue has come up, that has helped.

Darren

---
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell!
Find out more at http://www.sdmsoftware.com/products2.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
---

"markvr" <markvanrossum@xxxxxxxxx> wrote in message news:1187084970.294756.203900@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I am trying to run a vbs script as a startup script to install some
software but am having a few problems with permissions.

The share where the script is located has read, list and execute
permssions to "Everyone"

Sometimes on reboot the script doesn't run at all, and the event log
has the error:
Event Type: Error
Event Source: UserInit
Event Category: None
Event ID: 1000
Date: 14/08/2007
Time: 10:45:38
User: N/A
Computer: BFAC-DSK005
Description:
Could not execute the following script \\server\LogonScripts\vnc
\install_vnc.vbs. Access is denied.


Othertimes the script runs, but generates a "permssion denied" error
MsgBox when it tries to run the install .exe off the same share. I've
tried this both off the share in SYSVOL and off another network share
on a file server.
The relevant line it errors on is:
objWshShell.Run(strInstallPath & strVNCMSI & strVNCSwitches)

Does anyone have any ideas why this could be? I'm puzzled why
the .exe won't run at all, and why the whole script runs about 50% of
the time.

I've tried adding sleep statements incase it was trying to run before
the networking was fully up, but they made no difference.

Cheers!
mark


.

Relevant Pages

  • Re: Hacked Workstations
    ... You can use Group Policy to ... You could create a startup script that uses the command [net user ... administrator newpassword] which would assign the built in administrator a ... they may eventually catch on but for domain computers you could put the ...
    (microsoft.public.win2000.security)
  • Re: Hacked Workstations
    ... You can use Group Policy to ... > You could create a startup script that uses the command [net user ... > administrator newpassword] which would assign the built in administrator a ... > they may eventually catch on but for domain computers you could put the ...
    (microsoft.public.win2000.security)
  • Re: Shutdown Script Access to Network Resource
    ... although you could also use Domain Computers ... that does not have adequate permissions for System, ... > I'm trying to get a simple .bat script in a 2k domain ... > network share within the same domain to the local XP ...
    (microsoft.public.windows.group_policy)
  • Re: Re: problem with giving domain users local admim rights
    ... You can use a script to add domain user/group to the local administrators ... group of domain computers using the "net localgroup" command. ... > Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.group_policy)
  • Re: W2K3 Startup Script Problems: ACCESS IS DENIED PLZ HELP!
    ... Make sure that the Domain Computers group has Change and Read permissions. ... >justed fine when the script resided on our Windows 2000 File server. ...
    (microsoft.public.windows.server.general)