[gptalk] Re: Start up script GP

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Apr 2008 10:31:21 -0700

At the workstation, you can run RSOP.MSC and drill into the scripts section
(it looks just like the GP Editor namespace). It will tell you if the script
was being processed and when it last ran.

 

Or, if you're not at the workstation, using GPMC's GP Results Wizard to
connect remotely to the machine and find out which GPOs and settings applied
during the last processing cycle.

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:29 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

How do I do that?  I have never done that before.

On Thu, Apr 10, 2008 at 12:01 PM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

As Darren and I both suggested, also check RSOP and make sure the script is
actually being applied.

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:58 AM


To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

On windows vista, it works perfectly, but on windows XP it is not working at
all.

This is very weird.  I will try to put access on domain computers and we
will see what happens.

On Thu, Apr 10, 2008 at 11:48 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

If "Authenticated Users" has read access that should suffice. However, I've
seen weirdness before where access is denied until you actually add "Domain
Computers." Startup scripts run under the  NT AUTHORITY\SYSTEM context which
is the equivalent of the machine's computer object.

 

If it is a relatively small file, I would add it to the scripts/startup
folder of the GPO and copy it from there. Then you can be sure the machine
account is not being denied access. Also check RSoP and make sure the script
is actually being executed.

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:36 AM


To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

The location it is coming from is the netlogon folder that everyone has
access to.  I do know that the script works because as a Domain admin it
copies the file over fine.  It's only the users.  

On Thu, Apr 10, 2008 at 11:31 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Are you sure that your script is actually copying the file successfully?
Does the "Domain Computers" group have read access to the location you are
trying to copy from?

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 10:26 AM


To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Start up script GP

 

I have done a gpupdate /force on the test computer.  I have restarted the
test computer.  It still does not work.

Any ideas?

On Thu, Apr 10, 2008 at 10:57 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Yes, startup scripts won't run at background refresh, even if you do a
gpupdate /force command. The machine will process the script policy but
won't actually execute the script unless you reboot.

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 9:49 AM
To: gptalk@xxxxxxxxxxxxx


Subject: [gptalk] Re: Start up script GP

 

So you are saying for me to reboot the PC on top of replicating to all the
other domain controllers.

On Thu, Apr 10, 2008 at 10:42 AM, Nelson, Jamie R
<Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:

Startup scripts don't run during a background policy refresh.the machine
actually has to be rebooted for them to execute. If you've already deployed
the Group Policy Preference extensions, you can also use that to copy files.

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Dave Palombi
Sent: Thursday, April 10, 2008 9:13 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Start up script GP

 

Hello,

I have been trying to copy over a file to c:\windows before the users log
in.  All users have domain users rights.  (no access to anything)  I need a
file copied over to c:\windows.  I have added a start up script to the
computer configurations but when I do a gpresult it does not apply.  I have
force a replication but it still does not seem to work.

Dave

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

 

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

 

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

 

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

 

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

 

Other related posts: