#206305 - 2012-11-28 11:42 PM
call Kix from GPO
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
hi, i have been using this Kix script for quite a while and have recently discovered issues with Windows 7. this particular question isn't to do with Win7 in particular. i have recently deployed a new RODC and need to run some separate scripting for those users on that DC. what should the GPO script look like to run successfully from a GPO? mine now shows it won't run with UNC's:( thanks
|
Top
|
|
|
|
#206328 - 2012-11-30 03:49 PM
Re: call Kix from GPO
[Re: Robdutoit]
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
hi, thanks for the note. i didn't explain myself very well, did i.
i have had a script kicking off from the Policies\Windows Setting\Scripts\Logon for quite a while. ever since Win7 we've slowly had workstations unable to run this. not all Win7 machines and very random on which ones it doesn't work on. my temporary fix was to just drag a Shortcut to the User's Startup to get them running. now that we have this new RODC in another branch i've really got to nail down why i can't get certain scripts to run. so in the past we just had to start kix32.exe from \\server\netlogon\kix32.exe and if no script is defined it would just look for kixtart.kix file and run it. now that i have a different name for our RODC server i need to run kix32.exe in a batch to run a script against it. if i setup a batch, that is when it complains about running it from a UNC path. @echo off %0\..\kix32.exe kixtart_RODCserver.kix pause
now if i just run the \\server\netlogon\kix32 kixtart_RODCserver.kix from the Run on the local workstation it runs fine.
so in the end what can i put in the GPO to start up the above? what should it look like? should i use the Logon in Policies\Administrative Template\System\Logon instead??
Edited by swixtt (2012-11-30 04:25 PM)
|
Top
|
|
|
|
#206330 - 2012-11-30 10:44 PM
Re: call Kix from GPO
[Re: Lonkero]
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
because i've always done it that way within the single domain.
i've figured out that i need to add %0\..\ to both... i can get it run now when defining in the User's AD Profile. still doesn't kick-off with a GPO:( will see if what the results query shows on the workstation.
|
Top
|
|
|
|
#206331 - 2012-11-30 11:21 PM
Re: call Kix from GPO
[Re: swixtt]
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
OK, i have a feeling it is detecting 'slow link' and shutting down the 'Scripts' as that is the default behavior for it.:( i really thought it would pull the script from the local RODC but for whatever reason my default %logonserver% is changing. i had the RODC acting as the proper one for a day and then it is changing to our other DC's that aren't at that remote site. hmmm...
|
Top
|
|
|
|
#206497 - 2012-12-19 11:35 PM
Re: call Kix from GPO
[Re: Robdutoit]
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
well i have tested the script and it does run from the 'Run' in Windows Xp. this is the only machine i've moved onto the new RODC or existing Domain. i know the GPO is applying to this user as i can setup an app to start from the GPO (Notepad)and each time it does start-up. i've since setup the proper Sites and Subnets in Active Directory but my %LogonServer% is still changing:( the user's personal drive P: from their profile maps perfectly each time as well. this is a Windows XP machine.
|
Top
|
|
|
|
#206499 - 2012-12-20 10:24 PM
Re: call Kix from GPO
[Re: Lonkero]
|
swixtt
Fresh Scripter
Registered: 2012-01-18
Posts: 6
Loc: Canada
|
hi, thanks for the reply. i've looked in every log but don't see anything unusual. the RODC will serve requests sometimes... as of late it is doing it more regularly. when it does, the script fires and i get my drive mappings.:) i also notice when it does work and i check Slow Link it is stating NO... whenever the script doesn't run it will say YES and is directly related to authenticating to a Writable DC. today i have been reading on a possible problem when a 2003 DC is in the Domain as they do not understand RODC. i thought i had it figured out because it was working fine for a few hours but it did eventually go to one of the 2003 DC's to authenticate. i guess i have more work to do to figure this out. what can i look for specifically in the 'Log' to prove this is serving requests properly?
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
0 registered
and 507 anonymous users online.
|
|
|