[gptalk] Applaunch.wsf in Vista works better Synchronously?

  • From: "Mills, Mark" <Mark.Mills@xxxxxxxxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 7 Jun 2007 09:21:37 -0500

I can't get 2 GPO based logon scripts (using launchapp.wsf ) to work on
the same client unless I set the GPO's to run synchronously  ???Why???


Factors: Each user is a local Administrator (but not a Domain Admin).

              Second, I thought the launchapp.wsf was elevating
priviledges to map the drives, not hiding them through the use of a
limited token - I'm getting this per AdamV's post at
http://www.gpanswers.com/community/viewtopic.php?p=5625#5625  I'll be
reading up on this...

Since I am getting each mapped drive script to work individually, it
tells me that I have two correctly written GPO's. When used together,
only the first applied GPO will map the drives, the second GPO shows
launchapp.wsf scheduling and completing its script but leaving no mapped

I cannot help but think that there is something behind running a Windows
Host Script to get the limited token twice that is causing my issue.
Could the same user be getting two different "limited tokens" causing it
to see only once set of mapped drives? 

Having these two GPO's applied only works correctly when run
synchronously, Why?, and did the tokens have anything to do with it?  


Mark Mills,

Email: mark.mills@xxxxxxxxxxxxxxxxxxxxxx 


From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Mills, Mark
Sent: June 06, 2007 3:31 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Vista logon scripts: launchapp.wsf can only be run
once per logon, not once per GPO? 


Does anyone know if you can only have one instance of launchapp.wsf run
at logon?


I'm having difficulty running 2 logon script GPO's simultaneously in
Vista (they each map drives).  Both use launchapp.wsf to elevate
privileges and individually the GPO's run fine, however when I apply
both GPO's in the same OU  the one that runs first will execute, the one
that runs last will execute with the pop up telling you it is scheduling
a job but it does not map drives. I gave each GPO launchapp.wsf file
it's own pop up "echo" message to confirm this.


GPresult shows that both GPO's were applied successfully???

In my tests:

1)       I used both GPO's in the same User OU, and then tried where one
GPO was applied to the user OU and one was applied to the Computer OU in
loopback mode.  Neither situation allowed me to map drives from both
GPO's.  GPUpdate /force was run as well as other normal precautions.

2)       I also tried running launchapp.wsf with 2 different names to
make it look like 2 different apps(each GPO had a different name for
it), but that didn't help either.


My goal:

1)  A "user configuration" based logon script GPO applied to a "User OU"
for the office.  We will call this GPO#1 and it maps drives for the

2)  A second "user configuration" based logon script GPO APPLIED TO A
COMPUTER OBJECT OU (in loopback mode).

  This second GPO maps drives only on "special computers".  We will call
this GPO#2.  Both of these two GPO's work fine with XP clients.

Net result = one set of mapped drives for Users, and a second set of
additional mapped drives for special Computers.


I've tried both launchapp versions below:



New Info:

            New file Launchapp2.wsf




Old info:  Appendix A: Launchapp.wsf


Mark Mills

Email: mark.mills@xxxxxxxxxxxxxxxxxxxxxx 


Other related posts: