[gptalk] Re: Sysvol

  • From: rpo <rpo8373@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Fri, 30 May 2008 18:44:56 +1000

jerry,

we have the logon script specified for each user account in ad. what
do you mean by batch file exactly? a windows .bat file or are you
generically branding any script file? i ask purely because we use a
vbs script in the netlogon share.

daniel.

On 30/05/2008, Cruz, Jerome L <jerome.l.cruz@xxxxxxxxxx> wrote:
>
>
>
> Minesh,
>
>
>
> There are various location of scripts.
>
> 1)      Those stored 'within' the …\SYSVOL\Policies\{GUID}\... GPO folders
> as Alan notes.
>
> 2)      Those stored in the  …\SYSVOL\Scripts\... folder (the NETLOGON
> share).
>
> 3)      Those stored on other UNC paths (not on the DC).
>
> 4)      Those physically located on the local device.
>
>
>
> Calls can be made to run scripts via:
>
> ·         The User Account's defined Logon script path (limited to a  single
> batch file...and usually this is located in the NETLOGON share which you
> note is missing).  I've never tested pointing to a location that is not
> assumed to be in the DC's scripts folder (NETLOGON share), but I suppose
> it's possible. Better yet, just look at a sample account and see what is
> defined there. Go to AD, open the properties of a sample user account, click
> on the Profile tab, and look at the "Logon Script" field.
>
> ·         Domain Group Policies – And these can point to executables (.Bat,
> .Cmd, .Exe, etc.) stored on devices in your domain almost anywhere and
> includes (all locations noted above 1-4).
>
> ·         Startup locations on the local device (Start menu, Run keys in
> registry, Runonce keys in the registry, etc.)…you can use the "AUTORUNS"
> utility from Sysinternals (now Microsoft) to display these.
>
>
>
> Why I went into detail? Because you need to do some legwork. You stated…
>
>
>
> all of the pc's in the domain are still running the scripts... and  the
> scripts included a startup script and a login script - all vbs files...
>
>
>
> Try and find out exactly "what" is "'still" running and make sure that you
> know "where" the devices are looking for them. You may find that are NOT
> (and considering what you stated…Could NOT) be from the SYSVOL Scripts
> folder (again the NETLOGON share).
>
>
>
> Lastly, you were a bit vague on loosing the contents of SYSVOL through "a
> series of events"… could you provide additional details? The reason I ask is
> that I encountered a similar situation a few years back where, during a DC
> upgrade process, the SYSVOL folders were relocated to a different hard drive
> (and the client DEVICES knew it). A week passed and the cleanup activities
> deleted, not a copy of SYSVOL, but the 'real thing'. That was an
> all-nighter, but recoverable… Perhaps something similar happened to you (and
> maybe a further look afield might allow you to 'find' them)?
>
>
>
>
> Jerry Cruz | Group Policies Product Manager | Windows Infrastructure
> Architecture (http://wia.web.boeing.com) | Boeing IT
>
> Office 425-865-6755 | Mobile 425-591-6491
>
>
>
>
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Alan & Margaret
> Sent: Thursday, May 29, 2008 5:30 PM
>
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Sysvol
>
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Sysvol
>
>
>
>
>
> Hi Minesh,
>
>
>
> The scripts that are running, are they stored within a Policy (rather than
> the Logon scripts assigned to the user account)? if so their location is
> defined in sysvol\DNSNAME\Policies\GUID\Machine\
> Scripts\scripts.ini  where GUID is the GUID for that policy.
>
>
>
> Alan Cuthbertson
>
> Policy Management Software:-
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
>
> ADM Template Editor:-
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
>
> Policy Log Reporter(Free)
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
>
>
>
>
>
>
> ________________________________
>
>
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of minesh pandya
> Sent: Thursday, 29 May 2008 11:50 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Sysvol
>
>
>
> I am missing the Sysvol\scripts folder.
>
>
> On Thu, May 29, 2008 at 1:48 PM, Alan & Margaret <syspro@xxxxxxxxxxxxxxxx>
> wrote:
>
>
> Hi Minesh,
>
>
>
> The location of the scripts are defined in Machine\ Scripts\scripts.ini and
> User\ Scripts\scripts.ini within each Policy component under
> sysvol\Policies. Have a look in there and it will tell you where they are.
> Since they are running OK I suspect you have actually restored them
> correctly.
>
>
>
> Alan Cuthbertson
>
>
>
>
>
>  Policy Management Software:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
>
>
>
> ADM Template Editor:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
>
>
>
> Policy Log Reporter(Free)
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
>
>
>
>
>
>
>
>
> ________________________________
>
>
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of minesh pandya
> Sent: Thursday, 29 May 2008 9:47 PM
>
>
>
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Sysvol
>
>
>
> no they're defiantly from the Sysvol...
>
>
>
>
>
> On Wed, May 28, 2008 at 4:57 PM, Jakob H. Heidelberg <jakob@xxxxxxxxxxxxxxx>
> wrote:
>
>
> No Systemstate backup? Major bummer dude!
>
> However, are you sure that these scripts are not just placed on some other
> network location (UNC path)? What I mean is, maybe the GPO script references
> are just paths like \\DC\Share\Scripts\MyLoveletter.vbs?
> ;-)
>
> /Jakob
>
> On Wed, 28 May 2008 14:37:56 +0100, minesh pandya wrote
>
>
> > Hi all..
> >
> > My Sysvol has been lost... hard to do - never-the-less it has been lost
> through a sequence of events..
> > I have recovered the GPO policy files [for Sysvol\policies] from my local
> cache so thats all good but I am still missing the
> contents of the "scripts" folder...and I dont have a backup DC or backup
> tape..
> >
> > Does anyone know how I can get these scripts off a pc? as all of the pc's
> in the domain are still running the scripts...
> > the scripts included a startup script and a login script - all vbs
> files...
> > I have done a simple search on the pc but to no avail...
> >
> > Help would be appreciated...
> >
> > --
> > Regards
> >
> > Minesh Pandya
>
> --
> Open WebMail Project (http://openwebmail.org)
>
>
>
>
> --
> Regards
>
> Minesh Pandya
>
>
>
>
> --
> Regards
>
> Minesh Pandya
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: