Mandatory profiles and Logon/Logoff scripts

Situation
---------

Sever Farm containing W2K3SP1 servers
Users accessing WebInterface (WI) for applications
VBS logon script for printers, redirection and mapped drives setting
environment, Local

policy also.
Currently users using local profiles. Every night profiles are deleted ->
users lose customized settings.

I would like to switch to Mandatory policies and also use Flex profiles.

Restrictions:
-----------
NOT allowed to use use 'Terminal profile settings path' in the properties
for the user accounts.

What I have done so far:
Implemented local policy setting 'Set TS Roaming Profile path' to point to
another server.
Copied 'Default profile' from Ts to each user's TS roaming profile on the
other server.
Renamed NTUSER.DAT to NTUSER.MAN

Issue at stake:
--------------
I created a logon.cmd file and logoff.cmd file and set the Logon/Logoff
settings in the local policy on the servers in the farm. These scripts
restore and save changes made to an OPS file, first written localy then
copied back to the user's roaming profile.

When user starts WI, starts an application, say MS WORD, the local policy is
applied, the VBS script runs, and very quickly the logon.cmd file window
appears --> nothing happens.

As for the logoff.cmd script, it doesn't even run. --> I have no idea why!!

If I change the profile to "Roaming" instead of "Mandatory", both scripts run.

Does anyone have a clue as to why this is occurring?

I noticed that if I use the 'Terminal profile settings path' in the user
account properties, everything works fine.

i would appreciate any insight on my problem.

.

Relevant Pages

  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: Startup Bat File
    ... Link the policy at/above where their accounts reside in the AD tree. ... So it looks like it needs to be moved to the logon script within the ... registry settings and such for mapping drives, ... Domain Admins - Read, Write, Create All Child Objects, Delete All ...
    (microsoft.public.windows.group_policy)
  • Re: RDP logn script override?
    ... I'm guessing you want to change the user account settings as opposed ... When you set the policy on the computer, ... setting if the computer will allow a roaming user's profile to be downloaded ... >> What this does is apply a different logon script when the users log on to ...
    (microsoft.public.scripting.vbscript)
  • Re: Can not install applications using any admin account
    ... You could try if it works without those restrictive policy ... I also have a vbscript running at logon ... these Computer Policy Settings: ... restrictions is *not* applied to Administrators. ...
    (microsoft.public.windows.terminal_services)
  • Re: Startup Bat File
    ... So it looks like it needs to be moved to the logon script within the user ... registry settings and such for mapping drives, ... I have tested the bat file and it works outside of group policy but I ... Domain Admins - Read, Write, Create All Child Objects, Delete All Child ...
    (microsoft.public.windows.group_policy)