[gptalk] Re: Start up script GP

  • From: "Nelson, Jamie R" <Jamie.Nelson@xxxxxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Apr 2008 10:48:19 -0500

If "Authenticated Users" has read access that should suffice. However,
I've seen weirdness before where access is denied until you actually add
"Domain Computers." Startup scripts run under the  NT AUTHORITY\SYSTEM
context which is the equivalent of the machine's computer object.

 

If it is a relatively small file, I would add it to the scripts/startup
folder of the GPO and copy it from there. Then you can be sure the
machine account is not being denied access. Also check RSoP and make
sure the script is actually being executed.

 

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:36 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

The location it is coming from is the netlogon folder that everyone has
access to.  I do know that the script works because as a Domain admin it
copies the file over fine.  It's only the users.  

On Thu, Apr 10, 2008 at 11:31 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Are you sure that your script is actually copying the file successfully?
Does the "Domain Computers" group have read access to the location you
are trying to copy from?

 

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:26 AM


To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

I have done a gpupdate /force on the test computer.  I have restarted
the test computer.  It still does not work.

Any ideas?

On Thu, Apr 10, 2008 at 10:57 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Yes, startup scripts won't run at background refresh, even if you do a
gpupdate /force command. The machine will process the script policy but
won't actually execute the script unless you reboot.

 

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 9:49 AM
To: gptalk@xxxxxxxxxxxxx


Subject: [gptalk] Re: Start up script GP

 

So you are saying for me to reboot the PC on top of replicating to all
the other domain controllers.

On Thu, Apr 10, 2008 at 10:42 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Startup scripts don't run during a background policy refresh...the
machine actually has to be rebooted for them to execute. If you've
already deployed the Group Policy Preference extensions, you can also
use that to copy files.

 

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 9:13 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Start up script GP

 

Hello,

I have been trying to copy over a file to c:\windows before the users
log in.  All users have domain users rights.  (no access to anything)  I
need a file copied over to c:\windows.  I have added a start up script
to the computer configurations but when I do a gpresult it does not
apply.  I have force a replication but it still does not seem to work.

Dave

 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 

 

 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 

 

 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 

 



This e-mail may contain identifiable health information that is subject to 
protection under state and federal law. This information is intended to be for 
the use of the individual named above. If you are not the intended recipient, 
be aware that any disclosure, copying, distribution or use of the contents of 
this information is prohibited and may be punishable by law. If you have 
received this electronic transmission in error, please notify us immediately by 
electronic mail (reply).

Other related posts: