I am trying to run a script in grouppolicy from a local Xp professional
machine and send a log to the windows 2000 server.If I redirect the log to
the server as administrator all is o.k. the path: It's a one liner entry
%logonPC%...%date%...%time%...%username%
>\\computername\admin$\system32\shhs\logs\%rm-pc%%use-r%\5rm-pc%5fn-04%" The
username records as (administrator %username%) The administrator logon
executes and writes to the log file o.k. but the user logon will not
execute. I am not sure how to setup the path for a user and give the proper
permission I read "Domain User" group with write permission on the log file.
Try that and does not help. Event Id:1054 and Netdiag won't run wants
"dnsapI.dll, which I unsuccessfully tried to refresh from the i386 folder in
safemode. Any help would be appreciated. Thank you Jerry

On Sat, 19 Nov 2005 03:33:15 -0800, "Thomas" <(E-Mail Removed)> wrote:

>I am trying to run a script in grouppolicy from a local Xp professional
>machine and send a log to the windows 2000 server.If I redirect the log to
>the server as administrator all is o.k. the path: It's a one liner entry
>%logonPC%...%date%...%time%...%username%
> >\\computername\admin$\system32\shhs\logs\%rm-pc%%use-r%\5rm-pc%5fn-04%" The
>username records as (administrator %username%) The administrator logon
>executes and writes to the log file o.k. but the user logon will not
>execute. I am not sure how to setup the path for a user and give the proper
>permission I read "Domain User" group with write permission on the log file.
>Try that and does not help. Event Id:1054 and Netdiag won't run wants
>"dnsapI.dll, which I unsuccessfully tried to refresh from the i386 folder in
>safemode. Any help would be appreciated. Thank you Jerry
>

A user cannot write to an Administrative share (Admin$).
Why not create a share and grant users read and write on the file system and atleast Read and Write
on the share.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

Reply to:
> Jerold Schulman
> Windows Server MVP
> JSI, Inc.
> http://www.jsiinc.com
> http://www.jsifaq.com

I am not educated with the likes and dislikes of Group Policy running
scripts. The goal is to capture all logon.etc. "Everyone" who logs on
registers to <somewhere.txt>; via GroupPolicy
(logon),(logoff),(startup),(shutdown).[echo
%computername%...%date%...%time%...%shutdown%...%username% >>
<somewhere.txt>] Everyone includes local and domain logon.etc. I was under
the impression that Group Policy was and administrators tool and would write
to an Administrator file, It does, but when a %username% is not a
Administrator it [echo %username%]does an: "Access Deny" message in the dos
window during testing, and when logging on with Group Policy enabled for the
script refuses to write.



If it has to be a share then the batch will either copy it to the
Administrator only folder and delete the user file synchronously. Optionally
the <somewhere.txt> can reside locally (preferred) and copy to the server
administrator only folder on the server. The purpose is to take advantage of
Group Policy log/start/shut features. Offline files works with any user
just great; logging on and off, expected the same concept using Group
Policy.............Thank you for you help. Jerry

On Sat, 19 Nov 2005 23:39:21 -0800, "Thomas" <(E-Mail Removed)> wrote:

>Reply to:
>> Jerold Schulman
>> Windows Server MVP
>> JSI, Inc.
>> http://www.jsiinc.com
>> http://www.jsifaq.com
>
>I am not educated with the likes and dislikes of Group Policy running
>scripts. The goal is to capture all logon.etc. "Everyone" who logs on
>registers to <somewhere.txt>; via GroupPolicy
>(logon),(logoff),(startup),(shutdown).[echo
>%computername%...%date%...%time%...%shutdown%...%username% >>
><somewhere.txt>] Everyone includes local and domain logon.etc. I was under
>the impression that Group Policy was and administrators tool and would write
>to an Administrator file, It does, but when a %username% is not a
>Administrator it [echo %username%]does an: "Access Deny" message in the dos
>window during testing, and when logging on with Group Policy enabled for the
>script refuses to write.
>
>
>
>If it has to be a share then the batch will either copy it to the
>Administrator only folder and delete the user file synchronously. Optionally
>the <somewhere.txt> can reside locally (preferred) and copy to the server
>administrator only folder on the server. The purpose is to take advantage of
>Group Policy log/start/shut features. Offline files works with any user
>just great; logging on and off, expected the same concept using Group
>Policy.............Thank you for you help. Jerry
>

Your previous <someplace.txt> was "\\computername\admin$\system32\shhs\logs\%rm-pc%%use-r%\5rm-pc%5fn-04%"
and I simply stated that you can't use admin$ for a normal user.

Create a share on \\ComputerName, like Info and use
"\\ComputerName\Info\%rm-pc%%use-r%\5rm-pc%5fn-04%"
Makining sure that everyone had read and write to the share and folder on \\Computername.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com