I can't get 2 GPO based logon scripts (using launchapp.wsf ) to work on the same client unless I set the GPO's to run synchronously ???Why??? Factors: Each user is a local Administrator (but not a Domain Admin). Second, I thought the launchapp.wsf was elevating priviledges to map the drives, not hiding them through the use of a limited token - I'm getting this per AdamV's post at http://www.gpanswers.com/community/viewtopic.php?p=5625#5625 I'll be reading up on this... Since I am getting each mapped drive script to work individually, it tells me that I have two correctly written GPO's. When used together, only the first applied GPO will map the drives, the second GPO shows launchapp.wsf scheduling and completing its script but leaving no mapped drives. I cannot help but think that there is something behind running a Windows Host Script to get the limited token twice that is causing my issue. Could the same user be getting two different "limited tokens" causing it to see only once set of mapped drives? Having these two GPO's applied only works correctly when run synchronously, Why?, and did the tokens have anything to do with it? Mark Mills, Email: mark.mills@xxxxxxxxxxxxxxxxxxxxxx ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mills, Mark Sent: June 06, 2007 3:31 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Vista logon scripts: launchapp.wsf can only be run once per logon, not once per GPO? Does anyone know if you can only have one instance of launchapp.wsf run at logon? I'm having difficulty running 2 logon script GPO's simultaneously in Vista (they each map drives). Both use launchapp.wsf to elevate privileges and individually the GPO's run fine, however when I apply both GPO's in the same OU the one that runs first will execute, the one that runs last will execute with the pop up telling you it is scheduling a job but it does not map drives. I gave each GPO launchapp.wsf file it's own pop up "echo" message to confirm this. GPresult shows that both GPO's were applied successfully??? In my tests: 1) I used both GPO's in the same User OU, and then tried where one GPO was applied to the user OU and one was applied to the Computer OU in loopback mode. Neither situation allowed me to map drives from both GPO's. GPUpdate /force was run as well as other normal precautions. 2) I also tried running launchapp.wsf with 2 different names to make it look like 2 different apps(each GPO had a different name for it), but that didn't help either. My goal: 1) A "user configuration" based logon script GPO applied to a "User OU" for the office. We will call this GPO#1 and it maps drives for the user. 2) A second "user configuration" based logon script GPO APPLIED TO A COMPUTER OBJECT OU (in loopback mode). This second GPO maps drives only on "special computers". We will call this GPO#2. Both of these two GPO's work fine with XP clients. Net result = one set of mapped drives for Users, and a second set of additional mapped drives for special Computers. I've tried both launchapp versions below: LaunchApp2.wsf New Info: http://www.enterprisedev.org//blogs/michael/archive/2007/01/05/deploying -group-policy-using-vista.aspx New file Launchapp2.wsf LanchApp.wsf Old http://technet2.microsoft.com/WindowsVista/en/library/5ae8da2a-878e-48db -a3c1-4be6ac7cf7631033.mspx?mfr=true Old info: Appendix A: Launchapp.wsf Mark Mills Email: mark.mills@xxxxxxxxxxxxxxxxxxxxxx