Group Policy Logon Script Has Stopped working



I have a Domain Company1.org with 4 Location OU's beneath it. This
weekend one of the administrators attempted to make changes to the
default Group Policy for the Company1.org to get Remote Desktop and
Terminal services working. This sent the OU's into a tail spin. The
only way a standard user could access their e-mail or network drives
was to give them Domain Admin Rights. We have since got that piece
worked out by taking the policy back to where it began, but now my
Group Policy in the OU's for user logons are not going thru. It is
saying "access Denied" in the event log, but as far as I can tell the
permissions are all still correct. If I leave the user with Domain
Admin rights then when they log on they fire off the correct Batch File
and map to the correct drives, if I take them off of Domain Admin
Rights then the batch files don't run. I can run the batch File
Manually with no problem, or do a Netuse, but the group policy just
seems to be broken. Anybody else had this issue?

Thanks in advance.

.



Relevant Pages

  • Re: disable net create command
    ... this creates a local acct. ... acct just unrrestricted through group policy. ... >> a user created a local admin account by writing a net ... >> create batch file in wordpad and ran it creating a local ...
    (microsoft.public.win2000.security)
  • Re: Group Policy Logon Script Has Stopped working
    ... Is the Batch file only mapping drives? ... Group Policy in the OU's for user logons are not going thru. ... Admin rights then when they log on they fire off the correct Batch File ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy in a NON Active Directory environment
    ... You could use a batch file or other script to roll out group policy ... I have a bunch of Win2K Pro machines... ... > prefer to just prevent them from changing the screen saver settings. ...
    (microsoft.public.win2000.security)
  • Re: How to launch program only for certain group>
    ... If you start your program with 'start /w myprogram' it will not end the batch file until the program exits. ... @REM Launch MyProgram except if Administrator ... I then designate this batch file run by using the Group Policy Editor on the TS Server: ...
    (microsoft.public.windows.terminal_services)
  • Re: folder permissions
    ... permissions on the folder will change between restarts (or if you have a ... reliable mechanism that enforces regular restarts). ... I can do this using the group policy or maybe a start up batch file using ...
    (microsoft.public.windows.group_policy)

Loading