We have a fully functioning system using windows Xp clients.
Our issue is we need to run something similar to get windows 7 clients to loogon like the winXp clients.

We are Using Linux server, based on Ubuntu 10.04 [Karoshi]

This server base gives us all the features we need.

The part failing is when we logon to a windows 7 workstation, the logon scripts are run in 3 main parts and we find the part not working is where we alter the registry <HKEY_CURRENT_USER\>
Here is a small sample of the keys that wont work from within the Logon


; Set Registry Variables
$keysys="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System"
$keynet="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network"
$keyexp="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
$keyapp="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp"
$keyexa ="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
$keyiec ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel"
$keyidr ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions"
$keyisc ="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache"
$keyies ="HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings"
$keyier ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions"
$keycon ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections"
$keymmc ="HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC"
$keycmd ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\system"
$keyswr ="HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\"

;Disable Command Prompt
$ret=writevalue($keycmd,"DisableCMD","2","REG_DWORD")

;Disable MMC Plugins
$ret=writevalue($keymmc,"RestrictToPermittedSnapins","1","REG_DWORD")

;Disable Microsoft Management Console
$ret=writevalue($keymmc,"RestrictAuthorMode","1","REG_DWORD")

;Disable Lan connection properties
$ret=writevalue($keycon,"NC_LanProperties","0","REG_DWORD")

;Disable New Connection Wizard
$ret=writevalue($keycon,"NC_NewConnectionWizard","0","REG_DWORD")

;Disable Task Manager using C+A+D
$ret=writevalue($keysys,"DisableTaskMgr","1","REG_SZ")

;Disable Locking Workstation Locking using C+A+D
$ret=writevalue($keysys,"DisableLockWorkstation","1","REG_SZ")

;Disable Properties Menu selection - Recycle Bin
$ret=writevalue($keyexp,"NoPropertiesRecycleBin","1","REG_DWORD")

;Do not move deleted files to the recycle bin
$ret=writevalue($keyexp,"NoRecycleFiles","1","REG_DWORD")

;Disable automatic update
$ret=writevalue($keyexp,"NoAutoUpdate","1","REG_DWORD")

;Disable DFS Security Tab
$ret=writevalue($keyexp,"NoDFSTab","1","REG_DWORD")

;Disable Security Tab
$ret=writevalue($keyexp,"NoSecurityTab","1","REG_DWORD")

;Remove Hardware Tab
$ret=writevalue($keyexp,"NoHardwareTab","1","REG_DWORD")


I also tested these key changes with a local run of the file and everything functioned correctly. It is only when we run the script at logon.

We don't want to use Samba4 just yet as it is still mostly experimetal.
The main reason we are using Linux servers is the cost of running 6-7 MS Servers is high and we found some very good (for schools) server base [http://www.linuxgfx.co.uk/]
If anyone has any ideas I would like to hear them.

Regards
Bernai

Edited by Easter_bunny (2013-04-20 06:22 AM)