Page 2 of 4 <1234>
Topic Options
#33845 - 2002-12-03 03:06 PM Re: INGROUP problem
Steve M Offline
Fresh Scripter

Registered: 2002-05-08
Posts: 40
Loc: Orange,California
I tried what NTDOC suggested as a test and it mapped. Now this proves that it is not a permissions issue or a typo in my script. The issue is the group enumeration. Can anyone tell me why other ingroups work for me except for REALEC????
_________________________
Steve

Top
#33846 - 2002-12-03 03:17 PM Re: INGROUP problem
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Steve,

Does it exist when you execute the following script (List all groups on the domain)?
code:
$DomainString = "DOMAINNAME"
$DomainObj = GetObject("WinNT://" + $DomainString)
$DomainObj.Filter = Array("group")

For Each $GroupObj In $DomainObj
If $GroupObj.Class = "Group"
$List = $List + $GroupObj.Name + @crlf
EndIf

Next

?$List
$DomainObj = 0
$GroupObj = 0

Or, list groups of a user..
code:
$DomainString="ComputerName"
$UserString = "jdoe"

$UserObj = GetObject("WinNT://" + $DomainString + "/" + $UserString)

For Each $GroupObj In $UserObj.Groups
$List = $List + $GroupObj.Name + @crlf
Next

?List

$UserObj = 0
$GroupObj = 0

HTH,

Kent

[ 03. December 2002, 16:15: Message edited by: kdyer ]
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#33847 - 2002-12-03 03:18 PM Re: INGROUP problem
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11164
Loc: Boston, MA, USA
Have you tried the case-sensitivity issue?

Alternatively, write a test script that enumerates the groups a user is a member of and user on a user in the offending group. See how the group name is being returned and potentially adjust the spelling. See the ENUMGROUP() function in the KiXtart Manual for an example.
_________________________
There are two types of vessels, submarines and targets.

Top
#33848 - 2002-12-03 03:22 PM Re: INGROUP problem
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Have you tried using a newer version of KiX? Are you still struggling with 3.x?
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#33849 - 2002-12-03 03:25 PM Re: INGROUP problem
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Guys,
ADSI and UDFs are of little value if "The version of kix is 3.61.1.0".
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#33850 - 2002-12-03 03:48 PM Re: INGROUP problem
GRF Offline
Fresh Scripter

Registered: 2002-02-15
Posts: 45
Loc: Ohio
Maybe try it with a different drive letter.
_________________________
GF

Top
#33851 - 2002-12-03 04:14 PM Re: INGROUP problem
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
OK..

If this is KiXtart 3.61.

More questions...

Does this new group exist on all DCs? Have replication partners been setup?

Maybe try the code that I posted for checking the groups by downloading Kix 4.12 and running locally to test the results for ADSI.

HTH,

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#33852 - 2002-12-03 04:22 PM Re: INGROUP problem
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
One also has to wonder if this is an NT4 domain or Active Directory. Also then what type of group?
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#33853 - 2002-12-03 04:41 PM Re: INGROUP problem
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Steve,

Further to Les' question:

Is this a Domain Local, Global, or Universal Group?

Thanks,

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#33854 - 2002-12-03 05:03 PM Re: INGROUP problem
Steve M Offline
Fresh Scripter

Registered: 2002-05-08
Posts: 40
Loc: Orange,California
It is global just like the other ones. I even gave that user it's own logon1.bat which calls a stripped down code and it only maps L: and enumerates that the user is a member of TRAKKER.
code:
SHELL "winset.exe USERNAME=@USERID"
BREAK ON ;(re)set Ctrl-C/Break handling
COLOR r+/n

;
CLS
;
small
Color b+/n
BOX (7,20,17,61,FULL)
;
Color w+/n
;
IF ((@time > "00:00:00") AND (@time < "12:00:00"))
at (9,22) "Good Morning,"
ELSE
IF ((@time >= "12:00:00") AND (@time < "18:00:00"))
at (9,22) "Good Afternoon,"
ELSE
at (9,22) "Good Evening,"
ENDIF
ENDIF
;
at (10,22) @fullname
at (12,22) "Please Wait For Logon script Execution"
at (13,22) "Progress"

$drive="\\FS2\"+@userid+chr(36)
USE U: $drive
SLEEP 5

DelKey("HKEY_CURRENT_USER\Software\KiXtart\TokenCache")




if INGROUP("RealEC")
USE R: /delete /Persistent
USE R: "\\FS1\RealEC"
? "Member of RealEC group"
endif
sleep 5

if INGROUP("TRAKKER")
USE L: /delete /Persistent
use L: "\\TK2\TRAKKER"
? "Member of Trakker group"
ENDIF
sleep 5

_________________________
Steve

Top
#33855 - 2002-12-03 06:27 PM Re: INGROUP problem
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11164
Loc: Boston, MA, USA
The Token Cache should not even exist under KiXtart 3.6x since it was only added in KiXtart 4.x

Can you do a slightly different experiment and run the same code with both KiXtart 3.6x and 4.12 and see whether there is any difference?

Also use ENUMGROUP() (see KiXtart Manual for example) to enumerate the group membershisp and see whether there's anything unusual.

[ 03. December 2002, 18:29: Message edited by: sealeopard ]
_________________________
There are two types of vessels, submarines and targets.

Top
#33856 - 2002-12-03 09:37 PM Re: INGROUP problem
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11623
Loc: CA
Les,

He stated:
quote:
I am using 4.1 version if that helps
So we know he is using a new enough version to use UDFs etc...

Steve,

Try running your script from the DOS box but like this:

C:\TEMP\KIX32.EXE C:\TEMP\MYTEST.KIX /F

The /F will force KiXtart to renew the token cache.

From the manual:
quote:
Group-membership information cache.
As both methods of retrieving the group-membership are relatively costly in terms of network traffic and process time the latest update of KiXtart caches the group-membership information in the registry. This means that once the cache is filled, subsequent runs of KIX32.EXE will require much less time to retrieve the group-membership information.

The group-membership cache is stored in the registry hive of the current user and contains security-identifier-to-groupname mappings. Changes to a user's group-membership are automatically handled by KiXtart during the next logon.

Note
If an existing group is renamed, that change will not be visible to KiXtart until the next time the token-cache is refreshed.

The cache is automatically refreshed every 30 days.

A refresh of the cache can also be forced using the new '/f' commandline option:

KIX32 /f

Optionally, you can include a date, indicating how old the cache must be for it to be refreshed:

KIX32 /f:2001/12/31

Note
The group-membership cache feature of KiXtart is only available on Windows NT or higher.


Top
#33857 - 2002-12-03 09:39 PM Re: INGROUP problem
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11164
Loc: Boston, MA, USA
However, further down inthe thread, Steve states that he is using KiXtart 3.61 as identified by the KiXtart executable version.
_________________________
There are two types of vessels, submarines and targets.

Top
#33858 - 2002-12-03 09:44 PM Re: INGROUP problem
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11623
Loc: CA
Hmm.. Okay SORRY! I missed that.

FDISK, FORMAT C: /S should fix it as well [Eek!]

Top
#33859 - 2002-12-04 12:45 AM Re: INGROUP problem
Steve M Offline
Fresh Scripter

Registered: 2002-05-08
Posts: 40
Loc: Orange,California
Something interesting if it will help you all resolve my issue. Today I created a new global group and a hiden share on the server. I put both new users created yesterday into this group and added the code and they map no problem. Below is the code,
code:
 if INGROUP("ESCROW-UNIT6")
USE S: /delete /Persistent
use S: "\\FS2\ESCROW-UNIT6$"
? "Member of ESCROW-UNIT6 group"
ENDIF

_________________________
Steve

Top
#33860 - 2002-12-04 12:47 AM Re: INGROUP problem
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
Have you migrated from NT4 to W2K AD using Sid history?
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#33861 - 2002-12-04 12:48 AM Re: INGROUP problem
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
OK..

So, why not create a group called REALC1 and try the script?

Or.. Delete the "REALC" group.. Let replication occur and create it to try it again?

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#33862 - 2002-12-04 03:17 AM Re: INGROUP problem
Steve M Offline
Fresh Scripter

Registered: 2002-05-08
Posts: 40
Loc: Orange,California
We been on win2k ad for a long time. Kix was implemented about 3 months now
_________________________
Steve

Top
#33863 - 2002-12-04 03:19 AM Re: INGROUP problem
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Steve,

I think what Howard and I are trying to drive at is there maybe some corruption in the SID for this new group you created last week.

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#33864 - 2002-12-04 05:47 AM Re: INGROUP problem
Steve M Offline
Fresh Scripter

Registered: 2002-05-08
Posts: 40
Loc: Orange,California
I created a REALEC1 group and added that to the the script and no result. So sid corruption it is not.
_________________________
Steve

Top
Page 2 of 4 <1234>


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
1 registered (Allen) and 466 anonymous users online.
Newest Members
gespanntleuchten, DaveatAdvanced, Paulo_Alves, UsTaaa, xxJJxx
17864 Registered Users

Generated in 0.066 seconds in which 0.025 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org