RE: GPO Problem
- From: kemics <kemics@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 10 Aug 2005 10:51:02 -0700
Hutch,
If you would of read above you would see that he already has those groups
set up for the folders correctly as he and I spoke about it a few times
already... No need to rehash that idea.
Rainman,
I was thinking about this last evening at work, can you give us any
indication that the batch file is being called at all... Put something in
there that verifies it is being called... Possibly the GPO is setup
incorrectly...
--AOPC Network Tech
"Hutch" wrote:
> It would help to know the exact permissions you have setup.
>
> On the Share, I assume you have removed the Everyone Group (Default for all
> new shares), and added the Group you needed. The permissions there are
> Read/Modify, or Full Control??
>
> Then on the Security Settings, you have added that group as well?? There is
> needs a minimum of Read.
>
> The batch file looks fine. What happens when you try running the batch
> under your user credentials??
>
> "kemics" wrote:
>
> > without knowing your network architecture it is tough to troubleshoot from
> > here, but that is truely weird... if their user name has access and is
> > running the script from SYSVOL, then that share should be shown...
> >
> > my suggestion, add something to the script that would send a message to you
> > or something, maybe they are not accessing the .bat file correctly?
> > --
> > --AOPC Network Tech
> >
> >
> > "Rainman777" wrote:
> >
> > > I can right click on "my computer" and "map network drive" and it works fine.
> > > This is just plain strange.
> > > -Shane
> > >
> > > "Rainman777" wrote:
> > >
> > > > It is shared and the SECURITY group that the user is a member of at this
> > > > point has full control
> > > >
> > > >
> > > > -Shane
> > > >
> > > > "kemics" wrote:
> > > >
> > > > > This might sound simple, but if you are mapping a drive to that location..
> > > > > You need to have it Shared, what did you share the folder as?
> > > > >
> > > > > Make sure that you give the user that is trying to map it access to the
> > > > > share, also make sure they have access to the local folder... that's what the
> > > > > problem sounds like...
> > > > > --
> > > > > --AOPC Network Tech
> > > > >
> > > > >
> > > > > "Rainman777" wrote:
> > > > >
> > > > > > Removed it from its previous location and placed it in the SYSVOl folder
> > > > > > under my domain\scripts\
> > > > > >
> > > > > > When I try to go to a command prompt to manually map the drive using the net
> > > > > > use command I get the following error:
> > > > > > ---------------------------------------------------------------
> > > > > > System error 1326 has occured.
> > > > > > Logon failure: unknown user name or bad password
> > > > > > ------------------------------------------------------------------
> > > > > >
> > > > > > This users security group has full control on the data location why does
> > > > > > this not work? It's gotta be something simple and this error points towards
> > > > > > permissions, but I can't fugure it out. Thanks for any help ;-)
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > "kemics" wrote:
> > > > > >
> > > > > > > can you put the script int he SYSVOL and run it from there? might be a little
> > > > > > > easier
> > > > > > > --
> > > > > > > --AOPC Network Tech
> > > > > > >
> > > > > > >
> > > > > > > "Rainman777" wrote:
> > > > > > >
> > > > > > > > I have a been having a problem using GP to map needed drives. I created a
> > > > > > > > logon.bat file and assigned the security group the read and apply group
> > > > > > > > policy permission. I run a GPResult on one of the systems and this is what I
> > > > > > > > get:
> > > > > > > >
> > > > > > > >
> > > > > > > > The mapped drive is the Maryanne Mapped Drive which you can see is appiled.
> > > > > > > > Below is the contents of my logon.bat file to map the drive:
> > > > > > > >
> > > > > > > > ------------------------------------------------
> > > > > > > > @ echo off
> > > > > > > > net use Y: \\MaryAnne\District Office
> > > > > > > > Quit
> > > > > > > > -------------------------------------------------
> > > > > > > >
> > > > > > > > Yet when I click on the my computer, the drive is not there. Any help would
> > > > > > > > be greatly apprieciated. Thanks so much.
> > > > > > > >
> > > > > > > > -Shane M. Ely
> > > > > > > >
> > > > > > > > ---------------------------------------------------------------------------------------------
> > > > > > > >
> > > > > > > > ------------------------------------------------------------------------------------------
> > > > > > > > Microsoft Windows XP [Version 5.1.2600]
> > > > > > > > (C) Copyright 1985-2001 Microsoft Corp.
> > > > > > > >
> > > > > > > > C:\Documents and Settings\marsha.wainio>gpresult
> > > > > > > >
> > > > > > > > Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
> > > > > > > > Copyright (C) Microsoft Corp. 1981-2001
> > > > > > > >
> > > > > > > > Created On 8/9/2005 at 10:54:01 AM
> > > > > > > >
> > > > > > > >
> > > > > > > > RSOP results for ORLANDUSD\Marsha.Wainio on MACBUSTER : Logging Mode
> > > > > > > > ---------------------------------------------------------------------
> > > > > > > >
> > > > > > > > OS Type: Microsoft Windows XP Professional
> > > > > > > > OS Configuration: Member Workstation
> > > > > > > > OS Version: 5.1.2600
> > > > > > > > Domain Name: ORLANDUSD
> > > > > > > > Domain Type: Windows 2000
> > > > > > > > Site Name: DistrictOffice
> > > > > > > > Roaming Profile:
> > > > > > > > Local Profile: C:\Documents and Settings\marsha.wainio
> > > > > > > > Connected over a slow link?: No
> > > > > > > >
> > > > > > > >
> > > > > > > > COMPUTER SETTINGS
> > > > > > > > ------------------
> > > > > > > > CN=MACBUSTER,OU=DO Computers,OU=District Office,DC=orlandusd,DC=net
> > > > > > > > Last time Group Policy was applied: 8/9/2005 at 10:46:05 AM
> > > > > > > > Group Policy was applied from: vermont.orlandusd.net
> > > > > > > > Group Policy slow link threshold: 500 kbps
> > > > > > > >
> > > > > > > > Applied Group Policy Objects
> > > > > > > > -----------------------------
> > > > > > > > Remove Last Username
> > > > > > > > Photo Editor Filter
> > > > > > > > Legal Notice Caption
> > > > > > > > XP Firewall Disable
> > > > > > > >
> > > > > > > > The following GPOs were not applied because they were filtered out
> > > > > > > > -------------------------------------------------------------------
> > > > > > > > MaryAnne Mapped Drive
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > Local Group Policy
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > Food Services Mapped Drive
> > > > > > > > Filtering: Denied (Security)
> > > > > > > >
> > > > > > > > The computer is a part of the following security groups:
> > > > > > > > --------------------------------------------------------
> > > > > > > > BUILTIN\Administrators
> > > > > > > > Everyone
> > > > > > > > BUILTIN\Users
> > > > > > > > MACBUSTER$
> > > > > > > > Domain Computers
> > > > > > > > NT AUTHORITY\NETWORK
> > > > > > > > NT AUTHORITY\Authenticated Users
> > > > > > > >
> > > > > > > >
> > > > > > > > USER SETTINGS
> > > > > > > > --------------
> > > > > > > > CN=Marsha Wainio,OU=District Office,DC=orlandusd,DC=net
> > > > > > > > Last time Group Policy was applied: 8/9/2005 at 10:46:36 AM
> > > > > > > > Group Policy was applied from: vermont.orlandusd.net
> > > > > > > > Group Policy slow link threshold: 500 kbps
> > > > > > > >
> > > > > > > > Applied Group Policy Objects
> > > > > > > > -----------------------------
> > > > > > > > Photo Editor Filter
> > > > > > > > MaryAnne Mapped Drive
> > > > > > > >
> > > > > > > > The following GPOs were not applied because they were filtered out
> > > > > > > > -------------------------------------------------------------------
> > > > > > > > Remove Last Username
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > Legal Notice Caption
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > Local Group Policy
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > XP Firewall Disable
> > > > > > > > Filtering: Not Applied (Empty)
> > > > > > > >
> > > > > > > > Food Services Mapped Drive
> > > > > > > > Filtering: Denied (Security)
> > > > > > > >
> > > > > > > > The user is a part of the following security groups:
> > > > > > > > ----------------------------------------------------
> > > > > > > > Domain Users
> > > > > > > > Everyone
> > > > > > > > BUILTIN\Users
> > > > > > > > BUILTIN\Administrators
> > > > > > > > Domain Admins
> > > > > > > > Aeries_Database_Users
> > > > > > > > SP_Office
> > > > > > > > District_Office
> > > > > > > > LOCAL
> > > > > > > > NT AUTHORITY\INTERACTIVE
> > > > > > > > NT AUTHORITY\Authenticated Users
> > > > > > > > Getting the user name...
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > '\\orlandusd.net\SysVol\orlandusd.net\Policies\{C832F26F-5BAA-4143-ACDE-67FE2CF2
> > > > > > > > E9C8}\User\Scripts\Logon'
> > > > > > > > CMD.EXE was started with the above path as the current directory.
> > > > > > > > UNC paths are not supported. Defaulting to Windows directory.
> > > > > > > > System error 1326 has occurred.
> > > > > > > >
> > > > > > > > Logon failure: unknown user name or bad password.
> > > > > > > >
> > > > > > > > Press any key to continue . . .
.
- References:
- GPO Problem
- From: Rainman777
- RE: GPO Problem
- From: kemics
- RE: GPO Problem
- From: Rainman777
- RE: GPO Problem
- From: kemics
- RE: GPO Problem
- From: Rainman777
- RE: GPO Problem
- From: Rainman777
- RE: GPO Problem
- From: kemics
- RE: GPO Problem
- From: Hutch
- GPO Problem
- Prev by Date: Re: Ways to corrupt AD
- Next by Date: Re: Mac OSX and AD
- Previous by thread: RE: GPO Problem
- Next by thread: RE: GPO Problem
- Index(es):