One of the first things this script does is copy the ini file information to a custom key in the reg.

I am assuming that you have added extra security restrictions?

What OS?

The script needs write access to this reg key

HKEY_LOCAL_MACHINE\SOFTWARE\Logon_Script

or change

$Configregkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Logon_Script"

to point to a spot in the reg that the users have write access rights to. (you will find this in the logon.kix file 12th line down)

let me know if any of that worked

Bryce

Or maybe use the SU service to write a key to the registry and give normal users write access to that directory?

I found this software that maybe able to use to change permission on the registry. I haven't really looked that much on this program but I'm sure this will do the job? Its called RegDACL
http://www.heysoft.de/nt/reg/ep-regd.htm

something like this....

HKEY_USERS\@sid\Software\logon_script

but while this may work for NT/W2k/XP users, i am not able to test the impact on win9x/ME users.

if someone with access to a win9x computer could test the validity of this reg key

HKEY_USERS\@sid\Software

this would help very much.

Bryce

Thanks...

There are still a lot of things that i want to do to this script. hopefully with in the next couple of months, i will be able to pick this back up.

Now saying that , if you have any question just ask! Because like with the registry permission rights that were exposed a few posts up there might be other snags...

how about placing the folders(applications, functions, modules, scripts) on a hidden share and placing only logon.bat, logon.kix, and kix files in the netlogon directory? Which files do I edit to arrange that kind of setup? Thanks alot. -jvd

[ 26 February 2002: Message edited by: jvd626 ]

The UDF's are the first thing loaded., and since the custom scripts module is last....

The $runpath variable would be the thing to edit. it is used to define the location of all the other scripts.

Right now $runpath is being set from the logon.bat file to equal %0\..\, the current netlogon folder.

When i first wrote this script, early 4.0 beta, I did not have some of the commands available that we do now, so i had to create work arounds (EXPANDENVIRONMENTVARS being on of them.)

Bryce

ok give me a little bit of time to take a look at this.

Wait a sec, let me look ... yup I did that long time ago ... can I give Bryce a second five star rating ?

wait a tick ... crap, the bbs won't let me do that

-Shawn

(big thanks to Ron aka NTDOC for helping me out with this!)

So... i am am going to split it up, win9x goes X, and NT goes Y

please hold for code update.

Bryce

edit logon.kix and replace this line

code:

---

$Configregkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Logon_Script"

---

with

code:

---

select
	case @inwin = 2
		$Configregkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Logon_Script"
	case @inwin = 1
		$Configregkey = "HKEY_USER\@sid\Logon_Script"
endselect

---

I am unable to test this in a domain enviroment, so feedback would be welcome.

I just don't have the desktop space to bring a domain controller online here in my computer room at the house But i did find a win9x box!

Bryce

[ 01 March 2002: Message edited by: Bryce ]

Anyway, I have tested your workaround and I am having problems running it under windows 2000/NT40 even under admin priviledges. I've done some investigation and found that it is writing it under:

HKEY_CURRENT_USER|HKEY_USER|@sid|Logon_script

I have tried this also but unsuccessful:

code:

---

$Configregkey = "\Logon_Script"

---

Any thoughts?

code:

---

select
	case @inwin = 2
		$Configregkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Logon_Script"
	case @inwin = 1
		$Configregkey = "HKEY_USERS\@sid\logon_script"
endselect

---

hkey_users not hkey_user!!!

Bryce

[ 02 March 2002: Message edited by: Bryce ]

Looks great the modular logon script.

Some time ago (3 years) I made a similar logon script which I also posted here, and at Brainbuzz.

Keep up the good work!!

I found a bug due to a change on how newer versions of of kix4.0 handle local groups.

I fixed it and will update the download in a few minutes.

Bryce

speaking of config.ini, could you post yours? or email it to me.