#33845 - 2002-12-03 03:06 PM
Re: INGROUP problem
|
Steve M
Fresh Scripter
Registered: 2002-05-08
Posts: 40
Loc: Orange,California
|
I tried what NTDOC suggested as a test and it mapped. Now this proves that it is not a permissions issue or a typo in my script. The issue is the group enumeration. Can anyone tell me why other ingroups work for me except for REALEC????
_________________________
Steve
|
Top
|
|
|
|
#33846 - 2002-12-03 03:17 PM
Re: INGROUP problem
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Steve,
Does it exist when you execute the following script (List all groups on the domain)?
code:
$DomainString = "DOMAINNAME" $DomainObj = GetObject("WinNT://" + $DomainString) $DomainObj.Filter = Array("group")
For Each $GroupObj In $DomainObj If $GroupObj.Class = "Group" $List = $List + $GroupObj.Name + @crlf EndIf
Next
?$List $DomainObj = 0 $GroupObj = 0
Or, list groups of a user..
code:
$DomainString="ComputerName" $UserString = "jdoe"
$UserObj = GetObject("WinNT://" + $DomainString + "/" + $UserString) For Each $GroupObj In $UserObj.Groups $List = $List + $GroupObj.Name + @crlf Next
?List
$UserObj = 0 $GroupObj = 0
HTH,
Kent [ 03. December 2002, 16:15: Message edited by: kdyer ]
|
Top
|
|
|
|
#33850 - 2002-12-03 03:48 PM
Re: INGROUP problem
|
GRF
Fresh Scripter
Registered: 2002-02-15
Posts: 45
Loc: Ohio
|
Maybe try it with a different drive letter.
_________________________
GF
|
Top
|
|
|
|
#33851 - 2002-12-03 04:14 PM
Re: INGROUP problem
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
OK..
If this is KiXtart 3.61.
More questions...
Does this new group exist on all DCs? Have replication partners been setup?
Maybe try the code that I posted for checking the groups by downloading Kix 4.12 and running locally to test the results for ADSI.
HTH,
Kent
|
Top
|
|
|
|
#33853 - 2002-12-03 04:41 PM
Re: INGROUP problem
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Steve,
Further to Les' question:
Is this a Domain Local, Global, or Universal Group?
Thanks,
Kent
|
Top
|
|
|
|
#33854 - 2002-12-03 05:03 PM
Re: INGROUP problem
|
Steve M
Fresh Scripter
Registered: 2002-05-08
Posts: 40
Loc: Orange,California
|
It is global just like the other ones. I even gave that user it's own logon1.bat which calls a stripped down code and it only maps L: and enumerates that the user is a member of TRAKKER. code:
SHELL "winset.exe USERNAME=@USERID" BREAK ON ;(re)set Ctrl-C/Break handling COLOR r+/n ; CLS ; small Color b+/n BOX (7,20,17,61,FULL) ; Color w+/n ; IF ((@time > "00:00:00") AND (@time < "12:00:00")) at (9,22) "Good Morning," ELSE IF ((@time >= "12:00:00") AND (@time < "18:00:00")) at (9,22) "Good Afternoon," ELSE at (9,22) "Good Evening," ENDIF ENDIF ; at (10,22) @fullname at (12,22) "Please Wait For Logon script Execution" at (13,22) "Progress"
$drive="\\FS2\"+@userid+chr(36) USE U: $drive SLEEP 5
DelKey("HKEY_CURRENT_USER\Software\KiXtart\TokenCache")
if INGROUP("RealEC") USE R: /delete /Persistent USE R: "\\FS1\RealEC" ? "Member of RealEC group" endif sleep 5
if INGROUP("TRAKKER") USE L: /delete /Persistent use L: "\\TK2\TRAKKER" ? "Member of Trakker group" ENDIF sleep 5
_________________________
Steve
|
Top
|
|
|
|
#33856 - 2002-12-03 09:37 PM
Re: INGROUP problem
|
NTDOC
Administrator
Registered: 2000-07-28
Posts: 11623
Loc: CA
|
Les,
He stated: quote: I am using 4.1 version if that helps
So we know he is using a new enough version to use UDFs etc...
Steve,
Try running your script from the DOS box but like this:
C:\TEMP\KIX32.EXE C:\TEMP\MYTEST.KIX /F
The /F will force KiXtart to renew the token cache.
From the manual: quote: Group-membership information cache. As both methods of retrieving the group-membership are relatively costly in terms of network traffic and process time the latest update of KiXtart caches the group-membership information in the registry. This means that once the cache is filled, subsequent runs of KIX32.EXE will require much less time to retrieve the group-membership information. The group-membership cache is stored in the registry hive of the current user and contains security-identifier-to-groupname mappings. Changes to a user's group-membership are automatically handled by KiXtart during the next logon.
Note If an existing group is renamed, that change will not be visible to KiXtart until the next time the token-cache is refreshed.
The cache is automatically refreshed every 30 days.
A refresh of the cache can also be forced using the new '/f' commandline option:
KIX32 /f
Optionally, you can include a date, indicating how old the cache must be for it to be refreshed:
KIX32 /f:2001/12/31
Note The group-membership cache feature of KiXtart is only available on Windows NT or higher.
|
Top
|
|
|
|
#33858 - 2002-12-03 09:44 PM
Re: INGROUP problem
|
NTDOC
Administrator
Registered: 2000-07-28
Posts: 11623
Loc: CA
|
Hmm.. Okay SORRY! I missed that.
FDISK, FORMAT C: /S should fix it as well
|
Top
|
|
|
|
#33859 - 2002-12-04 12:45 AM
Re: INGROUP problem
|
Steve M
Fresh Scripter
Registered: 2002-05-08
Posts: 40
Loc: Orange,California
|
Something interesting if it will help you all resolve my issue. Today I created a new global group and a hiden share on the server. I put both new users created yesterday into this group and added the code and they map no problem. Below is the code, code:
if INGROUP("ESCROW-UNIT6") USE S: /delete /Persistent use S: "\\FS2\ESCROW-UNIT6$" ? "Member of ESCROW-UNIT6 group" ENDIF
_________________________
Steve
|
Top
|
|
|
|
#33860 - 2002-12-04 12:47 AM
Re: INGROUP problem
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
Have you migrated from NT4 to W2K AD using Sid history?
|
Top
|
|
|
|
#33861 - 2002-12-04 12:48 AM
Re: INGROUP problem
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
OK..
So, why not create a group called REALC1 and try the script?
Or.. Delete the "REALC" group.. Let replication occur and create it to try it again?
Kent
|
Top
|
|
|
|
#33862 - 2002-12-04 03:17 AM
Re: INGROUP problem
|
Steve M
Fresh Scripter
Registered: 2002-05-08
Posts: 40
Loc: Orange,California
|
We been on win2k ad for a long time. Kix was implemented about 3 months now
_________________________
Steve
|
Top
|
|
|
|
#33863 - 2002-12-04 03:19 AM
Re: INGROUP problem
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Steve,
I think what Howard and I are trying to drive at is there maybe some corruption in the SID for this new group you created last week.
Kent
|
Top
|
|
|
|
#33864 - 2002-12-04 05:47 AM
Re: INGROUP problem
|
Steve M
Fresh Scripter
Registered: 2002-05-08
Posts: 40
Loc: Orange,California
|
I created a REALEC1 group and added that to the the script and no result. So sid corruption it is not.
_________________________
Steve
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
1 registered
(Allen)
and 466 anonymous users online.
|
|
|