Page 1 of 1 1
Topic Options
#178155 - 2007-07-23 06:28 AM Help with Kixtart, works something, doesn't others
gaprofitt Offline
Lurker

Registered: 2007-07-23
Posts: 1
Hi all,

I am having some trouble with the script below and need some help. Sometimes it works fine and sometimes it doesn't. It has something to do with the /f switch or with something in GPO. I don't use GPO for login scripts but what is happening is sometimes the INGROUP commands will not
function when the user logs on. Locally on the PC I have ran the kix32.exe /f \\10.10.22.11\netlogon new.kix (syntax might be wrong) successfully and then boom, the drive mappings show up, then I go to another pc, login as the same user and get no mappings. I tried adding the /f to the login script but apparently it only works if ran locally. Any suggestions as to why the script works sometimes but not others..

Thanks guys,

Greg


This is my batch file...
 Code:
:
@echo off
cls

:START
echo.
echo Logging on to IMO.INT - 

echo ### Removing Existing Mappings ###

net use g: /delete
net use p: /delete
net use r: /delete
net use h: /delete

echo ### Installing Printers ###

rundll32 printui.dll,PrintUIEntry /in /q /n \\newfs01\bwcanon
rundll32 printui.dll,PrintUIEntry /in /q /n \\newfs01\colorcanon


If Not Exist %Windir%\Kix32.exe Goto InstallKix
If Not Exist %Windir%\UpgradeKix.Chk Goto Onsite
Attrib -R %Windir%\Kix32.exe
Del "%Windir%\UpgradeKix.Chk"

:InstallKix
Echo.
Echo Updating the logon script processor. Please wait..
copy %logonserver%\netlogon\kix\*.*  %windir%\*.* >nul 

:Onsite
%windir%\kix32.exe %logonserver%\netlogon\new.kix
goto exit


:EXIT
Exit


My Kix script

 Code:
;*******************************************
;Show welcome splash
;*******************************************

CLS
$section=1         ;Section 1
Color w+/n
Box (9,29,15,46,single)

Color w+/n
AT (10,30) "Welcome to the,"
AT (12,30) @domain
AT (12,39) "domain"
AT (14,30) @fullname
SLEEP 1
CLS
Color g+/n
? "Today is " + @DAY + ", " + @MONTH + " " + @MDAYNO + ", " @YEAR + "."
? "Processing login, please wait..."

:DRIVEMAP
;**********
;Begin Group-Based Mappings

IF INGROUP("NEWGROUPS")
	USE P: /DELETE
	USE P: "\\NEWFS01\GROUPS"
	USE H: /DELETE
	USE H: "\\NEWFS01\USERS\%USERNAME%"
	
ENDIF


;**********

IF INGROUP("NEWBARRYROSS")
	USE R: /DELETE
	USE R: "\\NEWFS01\npd"
	
ENDIF

;**********




Edited by Allen (2007-07-23 07:25 AM)
Edit Reason: added code tags

Top
#178159 - 2007-07-23 07:39 AM Re: Help with Kixtart, works something, doesn't others [Re: gaprofitt]
Allen Administrator Online   shocked
KiX Supporter
*****

Registered: 2003-04-19
Posts: 4545
Loc: USA
I don't see anything obvious (yet), but I suggest getting rid of most of the batch... and for the most part it's not necessary to copy kix32.exe to the local machine.

In your batch just fire off kix and the script
kix32.exe logon.kix

and in your kix...

;******************************************* 
;Show welcome splash
;*******************************************


CLS
$section=1 ;Section 1
Color w+/n
Box (9,29,15,46,single)


Color w+/n
AT (10,30) "Welcome to the,"
AT (12,30) @domain
AT (12,39) "domain"
AT (14,30) @fullname
SLEEP 1
CLS
Color g+/n
? "Today is " + @DAY + ", " + @MONTH + " " + @MDAYNO + ", " @YEAR + "."
? "Processing login, please wait..."


;removing drives
use g: /delete
use p: /delete
use r: /delete
use h: /delete


;Installing Printers
$RC=addprinterconnection("\\newfs01\bwcanon")
$RC=addprinterconnection("\\newfs01\colorcanon")






:DRIVEMAP
;**********
;Begin Group-Based Mappings


IF INGROUP("NEWGROUPS")
; USE P: /DELETE
USE P: "\\NEWFS01\GROUPS"
; USE H: /DELETE
USE H: "\\NEWFS01\USERS\" + @userid

ENDIF




;**********


IF INGROUP("NEWBARRYROSS")
; USE R: /DELETE
USE R: "\\NEWFS01\npd"

ENDIF


;**********

Top
#178162 - 2007-07-23 09:12 AM Re: Help with Kixtart, works something, doesn't others [Re: Allen]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
A common user cannot and should not be able to copy something to %windir% during the legacy logon script.
The NTFS security for %windir% for "Users" is per default set to "Read & Execute".
Verify if the kix32.exe exists in %windir%.
Just copy your kix32.exe and/or wkix32.exe to
\\domain.ext\sysvol\domain.ext\scripts\
or
\\domain.ext\netlogon\
and use it from there
If you really want to copy kix32.exe or wkix32.exe to the %windir%, I think you should use a GPO Computer Startup Script.


Edited by Witto (2007-07-23 12:45 PM)
Edit Reason: Added reason why user cannot copy to %windir%

Top
#178187 - 2007-07-23 01:20 PM Re: Help with Kixtart, works something, doesn't others [Re: Witto]
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11164
Loc: Boston, MA, USA
See also the "XP Fast Logon Optimization" FAQ at http://www.kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=112428
_________________________
There are two types of vessels, submarines and targets.

Top
#178217 - 2007-07-23 04:13 PM Re: Help with Kixtart, works something, doesn't others [Re: Witto]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1894
Loc: Hilversum, The Netherlands
I agree with Witto here, all logon stuff should be run from the netlogon share. If you really feel the need to run it from the local %windir% consider deploying the kix executables.

Btw Witto:
\\domain.ext\sysvol\domain.ext\scripts\ And \\domain.ext\netlogon\
are one and the same \:\)

Top
#178237 - 2007-07-23 06:17 PM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
 Originally Posted By: apronk

Btw Witto:
\\domain.ext\sysvol\domain.ext\scripts\ And \\domain.ext\netlogon\
are one and the same \:\)

I know
Thanks for telling anyway ;\)

Top
#178263 - 2007-07-23 10:06 PM Re: Help with Kixtart, works something, doesn't others [Re: Witto]
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
well, not really the same.
both might point to same folder, but doesn't make them the same.
_________________________
!

download KiXnet

Top
#178298 - 2007-07-24 10:32 AM Re: Help with Kixtart, works something, doesn't others [Re: Lonkero]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1894
Loc: Hilversum, The Netherlands
same folder, same security = same \:\)
Top
#178307 - 2007-07-24 11:25 AM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
different share still...
_________________________
!

download KiXnet

Top
#178308 - 2007-07-24 11:31 AM Re: Help with Kixtart, works something, doesn't others [Re: Lonkero]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1894
Loc: Hilversum, The Netherlands
subshare of the same share \:\)
Top
#178319 - 2007-07-24 03:14 PM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
Björn Offline
Korg Regular
*****

Registered: 2005-12-07
Posts: 953
Loc: Stockholm, Sweden.
I agree with apronk - but yes, it is a different share, but pointing to the same source \:\)
_________________________
as long as it works - why fix it?
If it doesn't work - kix-it!

Top
#178325 - 2007-07-24 03:59 PM Re: Help with Kixtart, works something, doesn't others [Re: Björn]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
I am more interested to know if gaprofitt his problem was caused to the fact that a user has no rights to write to his %windir%
Top
#178326 - 2007-07-24 04:17 PM Re: Help with Kixtart, works something, doesn't others [Re: Witto]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1894
Loc: Hilversum, The Netherlands
Domain users per definition do not have local admin rights.
This can be resolved by polies adding the Domain Users group to the local Power Users or Administrators group.

Top
#178334 - 2007-07-24 06:36 PM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11623
Loc: CA
Could be done, but shouldn't be done. ;\)

The Share could have different permissions than the folder permissions so yes it's different.

Top
#178335 - 2007-07-24 06:56 PM Re: Help with Kixtart, works something, doesn't others [Re: NTDOC]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1894
Loc: Hilversum, The Netherlands
 Originally Posted By: NTDOC
Could be done, but shouldn't be done. ;\)

The Share could have different permissions than the folder permissions so yes it's different.

Should be done, domain users should be local admins. Further restrictions can be set. and If you have a proper RIS image who cares wether they crash the workstation :P

Top
#178338 - 2007-07-24 07:07 PM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11623
Loc: CA
Because as an Admin that gives them quite a leg up on escalating their privs on the Domain as well. It is a Best Practice with Microsoft and all Large Enterprise Networks to not have a user with any higher privs than needed any where on your system.

That also makes it much easier for a remote hack into your network where they could easily gain the same rights as the user and as said above gives them a foot step into your network to work further.

Top
#178341 - 2007-07-24 09:20 PM Re: Help with Kixtart, works something, doesn't others [Re: Arend_]
Witto Offline
MM club member
*****

Registered: 2004-09-29
Posts: 1828
Loc: Belgium
IMHO domain users should not be local admins. A user should have the possibility to do all he needs on his computer. But installing, registering and other of these tasks should be left to domain admins. It will keep computers longer usuable. As domain admin, it will give you an easier job because computers do not get messed up that fast.
Top
#178342 - 2007-07-24 09:36 PM Re: Help with Kixtart, works something, doesn't others [Re: Witto]
DStelz Offline
Getting the hang of it

Registered: 2007-01-26
Posts: 72
Loc: Green Bay, WI
It's never fun when users can install whatever they want if you don't have cd-roms locked down or Internet content filtering blocking executables. Who knows what you'll get on your PCs. It's very unfortunate some software companies to not gear their applications toward this and you have to deal with users having elevated priviledges sometimes.
Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
2 registered (morganw, mole) and 414 anonymous users online.
Newest Members
gespanntleuchten, DaveatAdvanced, Paulo_Alves, UsTaaa, xxJJxx
17864 Registered Users

Generated in 0.085 seconds in which 0.031 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org