Win2008 Logon Script Won't Run

[reicherb]

I'm preparing for an eDir to AD (Win2008) migration. I'm having an issue getting an executable to launch during logon. (I've got a lot to learn)

I put authenticat.bat in both of the following locations on my primary domain controller (BRDC1)

C:\Windows\SYSVOL\sysvol\birchrun.local\scripts on BRDC1
C:\Windows\SYSVOL\sysvol\birchrun.local\Policies\{7C5CE395-3845-4788-9C1F-F3ACE9FE700B}\User\Scripts\Logon

I put the following login script in User Configuration\Policies\Windows Settings\Scripts (Logon/Loggoff) of a GPO at the root of my domain
\\brdc1\NETLOGON\authenticat.bat

authenticat.bat contains:
@echo off
start \\birchrun.local\netlogon\authenticat.exe RA[198.111.214.92]
pause

It doesn't matter what user I logon as, the script never launches. A command prompt never opens, I never get any error messages.

Any clues what I'm missing?

Thanks.

 

[Rubycon]

I know this sounds silly but did you put the logon script file name in the logon script field under the user profile tab?

 

[imagoon]

I know this sounds silly but did you put the logon script file name in the logon script field under the user profile tab?

Sorry Rubycon but that is the wrong place for 2003+ That is for really old versions of windows.



-----


CWindows\SYSVOL\sysvol\birchrun.local\scripts on BRDC1
CWindows\SYSVOL\sysvol\birchrun.local\Policies\{ 7C5CE395-3845-4788-9C1F-F3ACE9FE700B}\User\Scripts\Logon

I put the following login script in User Configuration\Policies\Windows Settings\Scripts (Logon/Loggoff) of a GPO at the root of my domain
\\brdc1\NETLOGON\authenticat.bat

authenticat.bat contains:
@echo off
start \\birchrun.local\netlogon\authenticat.exe RA[198.111.214.92]
pause


#1, logon scripts cannot be 'interactive' or they won't run (pause in this case)

#2 when you add a script there will be an 'open folder' button, you place the logon script there. DFS / FRS will take care of replicating the script. You reference it simply by the name without any pathing information. IE it should just show: authentivat.bat in the window.

#3 Why the root of the domain? Are you 100% you want this running on domain controllers and member servers? You should create a users OU and attach the script there.

here is a step by step:

http://www.petri.co.il/setting-up-logon-script-through-gpo-windows-server-2008.htm

 

[reicherb]

#1, logon scripts cannot be 'interactive' or they won't run (pause in this case)

I removed the pause and it still doesn't work. I did verify that if I browse to the file from a workstation that it works fine.

#3 Why the root of the domain? Are you 100% you want this running on domain controllers and member servers? You should create a users OU and attach the script there.

I used the delegation tab to exclude the DCs and other servers. It should run everywhere else.

here is a step by step:

http://www.petri.co.il/setting-up-logon-script-through-gpo-windows-server-2008.htm

It looks like I'm doing everything right...

 

[reicherb]

I got it. I was putting the path to the file in the policy. I changed it to just the file name and it works now.

Thanks.

 

[Rubycon]

Sorry Rubycon but that is the wrong place for 2003+ That is for really old versions of windows.

Hmm works for 2008 R2. 😉

 

[imagoon]

Hmm works for 2008 R2. 😉

It works but it is considered 'legacy.' It is a handy place to stick a script to run for one user. But for group management and the like it is easier to use GPO.

 

[Rubycon]

It works but it is considered 'legacy.' It is a handy place to stick a script to run for one user. But for group management and the like it is easier to use GPO.

Yes I was just saying one can try and it would show quickly if it were a permissions issue for domain members, etc.