norphf
(Fresh Scripter)
2005-05-12 02:45 PM
Kix script do not run over VPN

Hi

I have stared using, kix i my compagny.
Som users have a laptop, and an HardWare VPN tunnel at home.

When they are using there laptop at work, there is no probs with the kix, but when they com home where its over VPN, the kix do not run.
The computer have VPN/Access to the domaincontroller all the time, because the VPN tunnel is created in an Hardware box

Someone know why? / What is the official/most used way to make the runkix run on logon?

Just another stupid question from nOrphf


Howard Bullock
(KiX Supporter)
2005-05-12 02:57 PM
Re: Kix script do not run over VPN

There has been some other threads on this subject. What VPN client are you using? If you use Cisco's VPN client on the laptop, it can be configured to start the tunnel before the user logs on to the laptop.

Then when the user does log on, your script should execute.


norphf
(Fresh Scripter)
2005-05-25 10:13 AM
Re: Kix script do not run over VPN

ok, As I said, the VPN tunnel is created in an Hardware box (ZyWALL 2), so the VPN tunnel is running, even before, the laptop is started.

Howard Bullock
(KiX Supporter)
2005-05-25 03:05 PM
Re: Kix script do not run over VPN

And the computer is a member of the domain? If not, your script will not run. If so, have you verified that the computer can find the dmain and logon itself?

Have you seen our FAQ: Windows XP Professional Fast Logon Optimization


norphf
(Fresh Scripter)
2005-06-09 11:17 AM
Re: Kix script do not run over VPN

Yes. The computer is in a domain. Now I also have a computer insid the house, whom also have the same problem.
So is there someting wrong with my script?

Bat file:
@echo off
%0\..\kix\kix32.exe \\dc\kix\logon.kix

Kix file:
;SLETTER ALLE TIDLIGERE MAPPEDE DREV

use * /DELETE /PERSISTENT


; FUNKTIONER

;SLETTER ALLE PRINTERE PÅ COMPUTEREN
function DelPrinterConnections()
dim $c,$bk,$conn
$c=0
$bk="HKEY_CURRENT_USER\Printers\Connections"
$conn=enumkey($bk,$c)
while @error=0
;$c=$c+1
$conn=delkey($bk+"\"+$conn)
$conn=enumkey($bk,$c)
loop
endfunction


; GRUPPE INSTILLINGER

IF INGROUP("Overvågning")

use x: \\andblrdm\Lotus
use y: \\sqlserver\webfolder
use z: \\DC\progs

ENDIF

IF INGROUP("AB-online")

use z: "\\DC\GroupDirs\e-business"
use s: \\sqlserver\webfolder
use y: \\DC\GroupDirs\freelance
use p: \\DC\progs
use n: \\DC\GroupDirs\Newbizz

;BRUGER INSTILLINGER
IF @Userid = lmo
;messagebox("Halleløjsa","dialog",64)
ENDIF
ENDIF

IF INGROUP("Analyse")

use z: "\\DC\GroupDirs\analyse"
use y: "\\DC\GroupDirs\analyse - freelance"
use p: "\\dc\presag"

;BRUGER INSTILLINGER
IF @Userid = cbh
use s: "\\sqlserver\webfolder\analyse"
endif
ENDIF

IF INGROUP("Konsulent")

;GENERELLE KONSULENT INSTILLINGER
use z: \\DC\GroupDirs\Konsulent
use y: \\DC\GroupDirs\Analyse\analyse\gallup
use n: \\DC\GroupDirs\Newbizz

;BRUGER INSTILLINGER
IF @Userid = mha
use q: "\\DC\GroupDirs\e-business"
endif
IF @Userid <> leo
DelPrinterConnections()
endif

ENDIF

IF INGROUP("analyse - freelance")

use n: \\DC\GroupDirs\Newbizz
use y: "\\DC\GroupDirs\analyse - freelance"
use s: "\\dc\GroupDirs\Superbest"

ENDIF

IF INGROUP("Produktion")

use z: \\DC\GroupDirs\produktion

;BRUGER INSTILLINGER
IF @Userid = jpe
use k: \\DC\GroupDirs\Konsulent
endif

ENDIF


; INSTILLINGER ALLE SKAL HAVE

;DREV MAPNINGER
use @HomeDrive "@HomeShr\@HomeDir"
use u: \\dc\GroupDirs\fælles


; PRINTERE
AddPrinterConnection("\\dc\4500N")
AddPrinterConnection("\\dc\SplashG3")




Should there be a problem with this?


Sealeopard
(KiX Master)
2005-06-10 03:59 AM
Re: Kix script do not run over VPN

Is the VPN established before you log into the computer?

There are multiple posts dealing with this situation, most of them recommend to trigger the login script once a VPN connection has been detected.


Howard Bullock
(KiX Supporter)
2005-06-10 04:50 PM
Re: Kix script do not run over VPN

Does the black DOS window appear at all?

In your batch file and script create a log of activity.

Include lines like:

date<nul >>c:\script.log
echo. >>c:\script.log
time<nul >>c:\script.log
echo. >>c:\script.log

so you have evidence that the batch file executed.

No DOS window appears.
- Wrong data in the account properties
- CMD.exe or Command.com can not be executed on the computer
- XP fast logon issue See FAQ


Sealeopard
(KiX Master)
2005-06-11 05:12 AM
Re: Kix script do not run over VPN

This implies that the VPN is started before the login process.

norphf
(Fresh Scripter)
2005-06-17 12:06 PM
Re: Kix script do not run over VPN

Hmmm it looks like it has something to do with the account, the script do not run at all.

Someone knows what could cause that?

EDIT: I have disabled Windows XP Fast logon. So the Network should be established.


angryscientist
(Fresh Scripter)
2005-06-17 10:48 PM
Re: Kix script do not run over VPN

you guys, he has a HARDWARE vpn tunnel, there is no issue with the tunnel being up before the user tries to login, also, in a domain controller environment the user wont be able to log on to the domain if the client computer is unable to contact the domain controller. so basically if these guys are able to log on, then they should be recieving the script. check thier active directory settings.

Kdyer
(KiX Supporter)
2005-06-17 11:08 PM
Re: Kix script do not run over VPN

Quote:

you guys, he has a HARDWARE vpn tunnel, there is no issue with the tunnel being up before the user tries to login, also, in a domain controller environment the user wont be able to log on to the domain if the client computer is unable to contact the domain controller. so basically if these guys are able to log on, then they should be recieving the script. check thier active directory settings.




This may be correct.. But, you can set the Cisco VPN to use or not use a login script..

Kent


norphf
(Fresh Scripter)
2005-06-20 10:23 AM
Re: Kix script do not run over VPN

Quote:

Quote:

you guys, he has a HARDWARE vpn tunnel, there is no issue with the tunnel being up before the user tries to login, also, in a domain controller environment the user wont be able to log on to the domain if the client computer is unable to contact the domain controller. so basically if these guys are able to log on, then they should be recieving the script. check thier active directory settings.




This may be correct.. But, you can set the Cisco VPN to use or not use a login script..

Kent




Maybe with CISCO vpn, but now I am using ZyXEL ZyWALL...


norphf
(Fresh Scripter)
2005-06-20 10:27 AM
Re: Kix script do not run over VPN

Quote:

you guys, he has a HARDWARE vpn tunnel, there is no issue with the tunnel being up before the user tries to login, also, in a domain controller environment the user wont be able to log on to the domain if the client computer is unable to contact the domain controller. so basically if these guys are able to log on, then they should be recieving the script. check thier active directory settings.




Do you have any ide of what to look for? The script run with out problem, when he is a work...


AllenAdministrator
(KiX Supporter)
2005-06-20 03:07 PM
Re: Kix script do not run over VPN

Are your remote clients DNS settings pointing to your internal DNS server or using the ISP DNS?

norphf
(Fresh Scripter)
2005-06-21 01:43 PM
Re: Kix script do not run over VPN

No not 100 % But will check it. acually I dont think so.

But the server names/IP's ar in the hosts fil. If thats enough.


Les
(KiX Master)
2005-06-21 03:04 PM
Re: Kix script do not run over VPN

Not enough but you could try populating LMHosts with the needed info.

Mordac85
(Fresh Scripter)
2005-06-24 03:16 AM
Re: Kix script do not run over VPN

Quote:

... also, in a domain controller environment the user wont be able to log on to the domain if the client computer is unable to contact the domain controller.



A minor point but this is not entirely true. They will be able to log in to the laptop using cached credentials, and will be prompted for credentials when accessing a network resource. Not exactly what was conveyed.

Quote:

%0\..\kix\kix32.exe \\dc\kix\logon.kix



Considering the fact that he is trying to run kix32.exe from the DC, it could be a DNS issue. Since he said the "script" did not run (after adding the logging Howard recommended) which script does not run, the batch or the kix? Maybe try using a LOCAL copy of kix32.exe instead of the one on the DC?