[gptalk] Re: Bat File Not Executing.
- From: "Harry Singh" <hboogz@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Wed, 6 Aug 2008 14:00:21 -0400
Thanks Jerome.
I've heard of it and used UPHClean for some years now.
On Wed, Aug 6, 2008 at 1:55 PM, Cruz, Jerome L <jerome.l.cruz@xxxxxxxxxx>wrote:
> One of the more common issue with profiles is that when a user logs off,
> something (driver, process, etc.) holds the user's profile open and it does
> not correctly close. This can cause all kinds of problems in a Terminal
> Server environment as well as in an environment that has deployed Roaming
> User Profiles. If you haven't taken a look at it, go to the Microsoft web
> site and read about the *UPHClean* utility. It is applicable to all MS
> operating systems prior to Windows Vista and Windows Server 2008 (where the
> functionality of version 1.6d has been implemented directly in the OS).
>
>
>
> *Download Link for UPHClean:*
> http://www.microsoft.com/downloads/details.aspx?FamilyId=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
>
> * *
>
> *Robin Caron's (UPHClean author) Blog on TechNet:*
> http://blogs.technet.com/uphclean/default.aspx
>
>
>
>
>
> *Jerry Cruz* | Group Policies Product Manager | Windows Infrastructure
> Architecture | Boeing IT**
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Hutchinson, Alan
> *Sent:* Wednesday, August 06, 2008 10:12 AM
>
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Bat File Not Executing.
>
>
>
> I haven't tried it yet but came across this from another freelist which may
> do what you want when you've sorted script execution :
>
>
>
>
>
>
> http://www.theshonkproject.com/index.php?option=com_content&task=view&id=27&Itemid=31
>
>
>
> Regards,
>
>
>
> Alan.
>
>
> ------------------------------
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Nelson, Jamie
> *Sent:* 06 August 2008 16:27
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Bat File Not Executing.
>
> Hmm, yeah I can see how that is helpful from the teacher's perspective. If
> I were you I would definitely spend some time troubleshooting why the
> profiles are getting corrupted in the first place. That shouldn't be
> happening.
>
>
>
> As far as your script not executing, I recommend starting it off with
> something basic just to make sure it is actually executing. A good example
> would be piping the contents of ipconfig out to a text file on the C: drive
> or something.
>
>
>
> ipconfig >%SYSTEMDRIVE%\ipconfig.txt
>
>
>
> Then go back and verify the file is created after a reboot. That way you
> can be certain the script is actually running. If it is, but the profile is
> not getting deleted, you know you have some kind of logic error in the part
> of the script.
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Harry Singh
> *Sent:* Tuesday, August 05, 2008 6:26 PM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Bat File Not Executing.
>
>
>
> I'll be glad to elaborate.
>
> This is a lab environment and we've implemented a combination of mandatory
> profiles and GPO to control User configuration settings. Periodically, the
> profile experiences problems and just doesn't load properly. I've ran traces
> to see if any network connectivity issues exist between the workstation and
> the server where the profile resides and , although i see some collisions, i
> don't expect that to be the sole root cause. Instead of delving more time
> and resources, we've found by blowing the profile the issues resolve
> themselves --- and as i mentioned, this doesn't happen too frequently, only
> periodically. Now, the lab machines aren't rebooted or turned off nightly,
> so the deleting of profiles on reboot is really a way for us or the teacher
> on site to delete the profiles "on-demand". I'm sure there are alternate
> ways to get this done, and i'm all ears.
>
> So you're saying i can apply a GPO to an OU that just has computer accounts
> ?
>
> "To clarify, loopback policy is used when you want user configuration
> policies to apply based on where the computer object resides instead of the
> user object. " That's still a litte fuzzy to me, could you provide an
> example that could help me further put this confusion function to rest for
> me ?
>
> Thanks
>
> On Tue, Aug 5, 2008 at 5:27 PM, Nelson, Jamie <Jamie.Nelson@xxxxxxx>
> wrote:
>
> Delprof.exe can't delete a specific user profile, you generally tell it the
> max number of days old a profile can be (from last use) and it will delete
> anything older than that. I still don't understand why you want to delete it
> on every reboot though. Maybe you can be kind enough to elaborate?
>
>
>
> Actually, you were right the first time. For startup scripts to run they
> must be applied to OUs containing computer objects. You don't need loopback
> policy or security filtering for that. To clarify, loopback policy is used
> when you want user configuration policies to apply based on where the
> computer object resides instead of the user object.
>
>
>
> Hope that helps. J
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Harry Singh
> *Sent:* Tuesday, August 05, 2008 4:13 PM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Re: Bat File Not Executing.
>
>
>
> Jamie,
>
> Yes, the script is deleting the documents and setting folder. I agree this
> isn't very clean, but I am having trouble in negotiating the delprof
> command line to delete the profile i want under my specific parameters.
> Specifically, i want the profile to be deleted upon every reboot, either
> during the shutdown or, preferably, during the startup of the machine. ?
>
> Secondly, i believe my problem was i was applying the GPO to an OU that
> just had the computer accounts. I realized this can't be done, i'd have to
> apply it to the OU containing the LAB user account ; since only the Computer
> Config is enabled, the script will execute on whatever machine that user
> logs into, correct ? That being said, what should the loopback processing
> setting be on this GPO, if there are no user configured settings on this GPO
> but others ?
>
> Just to clear up any confusion, if i want machine specific settings only to
> apply to computer accounts, i need to:
>
>  Configure the Computer Configuration portion of the GPO.
>
>  Create a Security Group and add the respective computer
> accounts to this group and add it to the permissions of the GPO with the
> "Apply" GPO permission ?
>
>  Never apply GPO's to OU's that just have computer
> accounts
>
>  Enable loopback processing on a computer oriented GPO if
> you have any USER Confiuration settings in that GPO, otherwise just leave it
> disabled or not configured ?
>
>
>
> On Tue, Aug 5, 2008 at 4:57 PM, Nelson, Jamie <Jamie.Nelson@xxxxxxx>
> wrote:
>
> When you say "delete the profile" are you just trying to delete the profile
> folder under C:\Documents and Settings? That doesn't truly dump the profile,
> as there are still some registry keys that have to be cleaned up.
>
>
>
> On that note, I don't think deleting the profiles on startup is a good
> practice, even if they are for what I assume are temporary lab user
> accounts. You're better off creating a scheduled task on the machine to run
> the delprof.exe utility (from the Server Resource Kit) which can delete all
> profiles that have not been used in a specified number of days. Just my
> opinion though. You may have valid reason for doing it that way so please
> don't take offense. J
>
>
>
> As far as the script not executing is concerned, did you place it in the
> GPO's "machine\scripts\startup" folder in SYSVOL or somewhere else on your
> network?
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Harry Singh
> *Sent:* Tuesday, August 05, 2008 3:21 PM
> *To:* gptalk@xxxxxxxxxxxxx
> *Subject:* [gptalk] Bat File Not Executing.
>
>
>
> All -
>
> I've added a bat file to the startup script inside of a GPO, the computer
> configuration part of the GPO. The script deletes any profile starting with
> lab* and is suppose to run when the computer is restarted so as to not run
> into any file locks by explorer. However, the folders are not being deleted
> and when i run a gpresult, the script indicates: " This script has not been
> executed"
>
> any ideas ?
> *
> ------------------------------
> *
>
> *Confidentiality Warning:* This message and any attachments are intended
> only for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
>
>
>
>
Other related posts:
