local logoff script problem for non-admin users

[Der Kaiser]

I am trying to set up a logoff script. I am using Win2k Pro on a
standalone machine, no network / AD in sight - only dealing with Local
Computer Policy in gpedit.msc.

I have successfully got the logoff script working for the admin user,
however I want to apply this script for my g/f's account only (which
is just a normal user account) and I have no luck getting any other
user to be able to use the logoff script. I have already had a look at
the permissions for the folder in which the script is being kept and
it already has Read & Execute permissions for "Authenticated Users";
just to be sure I explicitly granted the user in question similar
rights (Read/Execute) - still no joy. i have also been trying to use
the runas command to load gpedit.msc with /env as the parameter whilst
logged on in my g/f's account to set up the logoff script - no luck
there either.

any suggestions?

tia

william

 

[Marty List]

I am trying to set up a logoff script. I am using Win2k Pro on a
standalone machine, no network / AD in sight - only dealing with Local
Computer Policy in gpedit.msc.

I have successfully got the logoff script working for the admin user,
however I want to apply this script for my g/f's account only (which
is just a normal user account) and I have no luck getting any other
user to be able to use the logoff script. I have already had a look at
the permissions for the folder in which the script is being kept and
it already has Read & Execute permissions for "Authenticated Users";
just to be sure I explicitly granted the user in question similar
rights (Read/Execute) - still no joy. i have also been trying to use
the runas command to load gpedit.msc with /env as the parameter whilst
logged on in my g/f's account to set up the logoff script - no luck
there either.

any suggestions?

tia

william

If the NTFS permissions are correct, then maybe the share permissions are
the problem. The user must first have access to the Share, and then to
NTFS. You need to be more descriptive than "I have no luck". What happens
if you try to launch the script manually while the user is logged in?

 

[Mark V]

I am trying to set up a logoff script. I am using Win2k Pro on a
standalone machine, no network / AD in sight - only dealing with
Local Computer Policy in gpedit.msc.

I have successfully got the logoff script working for the admin
user, however I want to apply this script for my g/f's account
only (which is just a normal user account) and I have no luck
getting any other user to be able to use the logoff script. I have
already had a look at the permissions for the folder in which the
script is being kept and it already has Read & Execute permissions
for "Authenticated Users"; just to be sure I explicitly granted
the user in question similar rights (Read/Execute) - still no joy.
i have also been trying to use the runas command to load
gpedit.msc with /env as the parameter whilst logged on in my g/f's
account to set up the logoff script - no luck there either.

No immediate solution.
Are you certain the script fails to run at all? If you reduce it to
@type nul>%systemdrive%\testfile
(assuming User has permission to write there of course)
does it work? Just thinking it may start but fail to do whatever it
is you have inside it.

Just to note that here (W2K, SP4) the permissions by default include
Authenticated Users: Read & Execute, List, Read
at the \Group Policy\ level and are inherited all the way down to
\GroupPolicy\User\Scripts\Logoff\