#140954 - 2005-06-03 12:06 PM
running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
Hello to everyone,
i've got a problem with running (accessing) a program via the SHELL-command on a network share. The kix-script is running at startup, before logonscreen appears, configed via GPO. The GPO is also configured to wait for the network before startup scripts are running and scripts should run visible (for testing). This is all OK...the script is running and all seems to be OK.
The XPSP2 Client belongs to a W2K3 AD Domain
Now the problem:
the kix script schould run a program via SHELL command e.g.
SHELL \\Servername\Share\file.exe
The share is located on a fileserver belonging to a NT4 Domain with complete trusts to the AD Domain.
This runs perfectly when i test the script while my windows session calling it manually from the logonserver, but if this script runs while booting the Client as startup script, the script is running, but the file is'nt executed.
My suggestion was, that the permissions on the networkshare were wrong, so i've added the Domain Computers Group to the sharefolder with read permissions, but that also did'nt work.
Then i've enabled the security logging on the networkshare to see with which account the client tries to access the share, but the log stays empty!  and yes, the logging is ok, cause it logs attempts accessing the share manually via a windwos session.
So it seems the script did not at all access that share. But why ???
Thanks for any answers to my Problem!
LittleNick
|
|
Top
|
|
|
|
|
#140956 - 2005-06-03 02:21 PM
Re: running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
Thanks for this tip, now things will become clearer! error code 5 (access denied).Shares on servers in the AD domain could be accessed via the script. So, must i permit more than the AD Domain Computers Group on that NT4 Domain Share?
LittleNick
|
|
Top
|
|
|
|
|
#140958 - 2005-06-03 02:56 PM
Re: running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
Les,
the fileserver belongs to a NT4 Domain, but OS on the fileserver is W2K and yes...with NT you are only able to map drives to a Share, not to subfolders. But thats not the thing, as i've written the script runs perfectly when i'am logged on and start it manually.
It must be a permission problem between the AD Domain and my NT4 Domain or the share on the fileserver. Strange.
LittleNick
|
|
Top
|
|
|
|
|
#140960 - 2005-06-03 03:09 PM
Re: running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
Les,
if i could do that, all will be ok...but i can't put about 1,5 Gigs into the netlogon of the DC because of a worldwide net. these files have to reside on one of our location fileservers which are all on old NT4 domains. Migrating these to the AD Domain is'nt a solution for now. And for the near future there is no chance to get a location fileserver into the AD Domain.
There must be a solution to access the Fileservers in the legacy Domain with the startup script. But How?
LittleNick
|
|
Top
|
|
|
|
|
#140961 - 2005-06-03 03:22 PM
Re: running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
Les,
i forgot...i have shared a folder on a XP AD Domain Client, and tried to access this share via the startup script and that works! So the startup script is able to access other folders than the netlogon.
|
|
Top
|
|
|
|
|
#140963 - 2005-06-07 10:05 AM
Re: running a program via kix before logon screen on XP client?
|
LittleNick
Fresh Scripter
Registered: 2005-06-03
Posts: 6
|
sealeopard,
you're right, it must be a permissions problem, because the script accesses shares on a Server in the AD Domain. The NTFS permissons on the W2K Fileserver in the old NT4 Domain are set to full access to NT4 domain\Domain Admins, read to everyone and read to AD Domain\Domain Computers. Share permissions are set to everyone full control. The NT4 Domain is fully trusted to the AD Domain.
Are there any other permissions i have to set to that share, so that the machine logon script could access the share?
I thought its enough to permit the AD Domain\Domain Cumputers, but this is not working.
|
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
0 registered
and 293 anonymous users online.
|
|
|
