Re: User authenticates, skips logon script
- From: MC Murphy <MCMurphy@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 27 Mar 2009 07:26:31 -0700
User logged in, no logon script ran; I browsed to it and ran it; it did not
map home folder; i browsed, it said "no access"; but it Properties\Security
she has full access; 30 minutes later I ran it again, it did map home folder;
browsed to it, she does have access. She must be in "Authenticated Users"
to have permissions to the share her home folder is in.
A DC File Rep Eventlog intermittently says "File Replication Service is no
longer preventing 'server' from becoming a domain controller". All DC's have
the same date/time/size on their logon.vbs. I'm going to do some Replmon,
and downloaded an FRS Diagnostic Tool to try out. Puzzling. I'll work with
your Test OU suggestion if these steps don't help.
"Ace Fekay [Microsoft Certified Trainer]" wrote:
In news:7228625F-D754-4EC6-87BA-D979E2FB88F0@xxxxxxxxxxxxx,.
MC Murphy <MCMurphy@xxxxxxxxxxxxxxxxxxxxxxxxx>, posted the following:
And that DNS server issue. This was an issue several weeks back,
then I found one of my dhcp servers handing out an ISP's dns server
as its alternate DNS server, instead of just my internal servers.
But I fixed that, and verified this problem machine/user with
IPCONFIG /all, it has just the internal dns servers/domain
controllers.
Interesting about a prior DNS issue. I assume all the DCs are only using the
internal DNS servers. Therefore, if you feel the DNS infrastructure is
running clean, and all machines can resolve all internal DCs, no services
are disabled on any DCs (such as the DHCP Client service), etc, and there
are no errors in the DC event viewers, or the client machines that this is
occuring on, then I think you will need to dig a little deeper with GPO
logging.
Try creating a separate OU, link the GPO to it, then move that user into it.
Then enable logging and see what is happening. Please take a look at the
following links to help guide you.
Fixing Group Policy problems by using log files
http://technet.microsoft.com/en-us/library/cc775423.aspx
Enable Logging for Group Policy Object Editor Client Side Extensions
http://technet.microsoft.com/en-us/library/cc759167.aspx
Troubleshooting Group Policy application problems
http://support.microsoft.com/kb/250842
Enable Verbose Global Policy Logging
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/RegistryTips/Miscellaneous/EnableVerboseGlobalPolicyLogging.html
JSI Tip 3100. How do enable Group Policy debug logging on a Windows 2000
Server?
http://windowsitpro.com/article/articleid/74419/jsi-tip-3100-how-do-enable-group-policy-debug-logging-on-a-windows-2000-server.html
Ace
- Follow-Ups:
- Re: User authenticates, skips logon script
- From: Ace Fekay [Microsoft Certified Trainer]
- Re: User authenticates, skips logon script
- References:
- User authenticates, skips logon script
- From: MC Murphy
- Re: User authenticates, skips logon script
- From: Ace Fekay [Microsoft Certified Trainer]
- Re: User authenticates, skips logon script
- From: MC Murphy
- Re: User authenticates, skips logon script
- From: Ace Fekay [Microsoft Certified Trainer]
- Re: User authenticates, skips logon script
- From: MC Murphy
- Re: User authenticates, skips logon script
- From: MC Murphy
- Re: User authenticates, skips logon script
- From: Ace Fekay [Microsoft Certified Trainer]
- User authenticates, skips logon script
- Prev by Date: Re: Add User to group through comparison to other user's memberships
- Next by Date: Re: Error 0x80005000 creating new AD object (SCCM 2007)
- Previous by thread: Re: User authenticates, skips logon script
- Next by thread: Re: User authenticates, skips logon script
- Index(es):
Relevant Pages
|
