Logon Scripts don't run if user logs in too early

D

Dominic Wyss

we have a Windows2003 Domain in mixed mode and
WindowsXP and Windows2000 workstations.

on most Windows2000 workstations the logon scripts
don't run if the user logs in as soon as the login
screen appears. he then has to log out and in again.
if we let the logon screen stay for about 2-3 minutes,
all works fine.

WinXP clients don't seem to be affected.

could this be a MasterBrowser problem, does the PC
need some time to find his DC with the scripts?
but actually it should find the DCs over DNS...

any ideas and hints?

Thanx
Domi
 
G

Glenn L

This is an interesting problem.
Are the logon scripts defined in a GPO or on the user account?
Are there any errors in the app log?
 
D

Dominic Wyss

Are the logon scripts defined in a GPO or on the user account?
yes, they are defined in a GPO. we have to OUs with different
LogonScripts and in different sites. both sites and both
GPOs/LogonScripts are affected.
Are there any errors in the app log?
Click to expand...
in the app log is nothing really usefull.
but in the sys log I just found on some workstations the
EventIDs 5788 & 5789 from Netlogon. maybe there's something
wrong with the computer accounts?
 
D

Dominic Wyss

debugging is enabled.
the first time I'm logging in I get the following errors:

USERENV(a0.80) 09:53:02:046 MyGetUserName: GetUserNameEx failed with 1355.
USERENV(a0.80) 09:53:02:546 MyGetUserName: GetUserNameEx failed with 1355.
USERENV(a0.80) 09:53:03:046 MyGetUserName: GetUserNameEx failed with 1355.
USERENV(a0.80) 09:53:03:046 GetUserGuid: Failed to get user guid with 1355.
[...]
USERENV(bc.6e4) 09:21:55:125 ProcessGPOs: Starting user Group Policy
processing...
USERENV(bc.6e4) 09:21:55:125 EnterCriticalPolicySection: User critical
section has been claimed. Handle = 0x318
USERENV(bc.6e4) 09:21:55:125 ProcessGPOs: Machine role is 2.
USERENV(bc.6e4) 09:21:55:125 ProcessGPOs: The DC for domain MYDOMAIN is
not available

after a logout and re-login it looks much better. the DC is found and
the group policies are applied.

so it's not the logon script itself, but all group policies don't seem
to be applied the first time the user logs in.

I'll now go after EventIDs 5788 & 5789.
But I hope you can give me some more hints about the debug log above.

thanx!
Domi
 
G

Glenn L

In order to assist with the debug, I really need to see the entire logon
process in the file.

USERENV(a0.80) 09:53:02:046 MyGetUserName: GetUserNameEx failed with 1355.

These are all too common, even when there really is no problem.

The best way to do this is to delete the file as the local admin, then login
as the affected user.
Then retrieve the file.
Paste the entire contents to this thread....god that will be ugly.
It would be better if you could just attach the file to the thread.
 
K

Ken B

Hey Glenn-

One of my friends has this problem on occasion with a workstation on his
network, where the DC is always running, turn on the workstation, and if you
log in as soon as the CTRL ALT DEL window comes up, you don't get drives
mapped. But if you wait like 30-45 sec's, the drives map fine.

Weird

Ken
 
D

Dominic Wyss

Sorry for posting this late. I've been busy...
the log is below:

USERENV(c8.624) 10:34:01:703 LibMain: Process Name:
C:\WINNT\system32\mmc.exe
USERENV(bc.a4) 10:35:06:921 UnloadUserProfile: Entering, hProfile = <0x214>
USERENV(bc.a4) 10:35:06:921 GetUserMutex: entering
USERENV(bc.a4) 10:35:06:921 GetUserMutex: Waiting...
USERENV(bc.a4) 10:35:06:921 GetUserMutex: Wait succeeded. Mutex
currently held.
USERENV(bc.a4) 10:35:08:156 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Succesfully unloaded profile
USERENV(bc.a4) 10:35:08:156 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(bc.a4) 10:35:08:156 UnLoadClassHive: Successfully unmounted
S-1-5-21-1311442653-1014379050-786498627-1044_Classes
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Successfully unloaded
user classes
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Impersonated user
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Writing local ini file
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Reverting to Self
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: exitting and cleaning up
USERENV(bc.a4) 10:35:08:156 LoadUserProfile: Releasing mutex.
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Leaving with a return
value of 1
USERENV(790.78c) 10:35:11:343 LibMain: Process Name:
C:\WINNT\System32\SCardSvr.exe
USERENV(bc.a4) 10:36:15:812 LibMain: Process Name:
\??\C:\WINNT\system32\winlogon.exe
USERENV(d8.d4) 10:36:16:843 LibMain: Process Name:
C:\WINNT\system32\services.exe
USERENV(e4.e0) 10:36:17:140 LibMain: Process Name:
C:\WINNT\system32\lsass.exe
USERENV(e4.e0) 10:36:19:890 LibMain: Process Name:
C:\WINNT\system32\lsass.exe
USERENV(1c8.1cc) 10:36:24:062 LibMain: Process Name:
C:\WINNT\system32\svchost.exe
USERENV(1ec.1f4) 10:36:24:718 LibMain: Process Name:
C:\WINNT\System32\svchost.exe
USERENV(1bc.1c0) 10:36:25:406 LibMain: Process Name:
C:\Programme\VPNclient\IreIKE.exe
USERENV(278.294) 10:36:36:531 LibMain: Process Name:
C:\Programme\Gemeinsame Dateien\CA\BrightStor\CADS\casdscsvc.exe
USERENV(290.2e8) 10:36:38:609 LibMain: Process Name:
C:\Programme\ARCserve\msgeng.exe
USERENV(36c.368) 10:36:43:375 LibMain: Process Name:
C:\WINNT\System32\NMSSvc.exe
USERENV(3f4.3ec) 10:36:51:203 LibMain: Process Name:
C:\WINNT\system32\MSTask.exe
USERENV(3c0.3c4) 10:36:51:421 LibMain: Process Name:
C:\NORMAN\Nvc\BIN\Zanda.exe
USERENV(428.434) 10:36:52:406 LibMain: Process Name:
C:\WINNT\System32\tcpsvcs.exe
USERENV(468.464) 10:36:52:859 LibMain: Process Name:
C:\Tools\VMWare\vmware-authd.exe
USERENV(468.478) 10:36:53:343 GetHkeyCU: RegOpenKey failed with error 2
USERENV(4b8.4c8) 10:36:55:171 LibMain: Process Name:
C:\WINNT\system32\svchost.exe
USERENV(bc.500) 10:37:00:078 ApplyGroupPolicy: Entering. Flags = 7
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs: Starting computer Group
Policy processing...
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:093 EnterCriticalPolicySection: Machine
critical section has been claimed. Handle = 0x324
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Machine role is 2.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: The DC for domain FIVE is not
available
USERENV(bc.500) 10:37:00:093 LeaveCriticalPolicySection: Critical
section 0x324 has been released.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Computer Group Policy has been
applied.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Leaving with 0.
USERENV(bc.500) 10:37:00:093 ApplyGroupPolicy: Leaving successfully.
USERENV(bc.508) 10:37:00:156 GPOThread: Next refresh will happen in 106
minutes
USERENV(530.52c) 10:37:01:703 LibMain: Process Name:
C:\NORMAN\nvc\BIN\NVCSCHED.EXE
USERENV(4d4.404) 10:37:02:125 LibMain: Process Name:
C:\Programme\ARCserve\asalert.exe
USERENV(3fc.524) 10:37:02:203 LibMain: Process Name:
C:\WINNT\System32\locator.exe
USERENV(520.528) 10:37:03:812 LibMain: Process Name:
C:\NORMAN\nvc\BIN\NJEEVES.EXE
USERENV(590.58c) 10:37:05:109 LibMain: Process Name:
C:\Programme\VPNclient\ifcfg.exe
USERENV(594.58c) 10:37:05:468 LibMain: Process Name:
C:\Programme\VPNclient\ifcfg.exe
USERENV(594.17c) 10:37:26:390 LibMain: Process Name:
C:\WINNT\System32\WBEM\WinMgmt.exe
USERENV(bc.a4) 10:37:37:234
=========================================================
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: Entering, hToken = <0x3c4>,
lpProfileInfo = 0x6f648
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: Entering, hToken = <0x3c4>,
lpProfileInfo = 0x6f648
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: lpProfileInfo->lpUserName =
<WYSD>
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL central profile path
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL default profile path
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL server name
USERENV(bc.a4) 10:37:37:249 GetUserMutex: entering
USERENV(bc.a4) 10:37:37:249 GetUserMutex: Waiting...
USERENV(bc.a4) 10:37:37:249 GetUserMutex: Wait succeeded. Mutex
currently held.
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: Entering
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: User is a Admin
USERENV(bc.a4) 10:37:37:249 IsCentralProfileReachable: Entering
USERENV(bc.a4) 10:37:37:249 IsCentralProfileReachable: Null path. Leaving
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: Profile path = <>
USERENV(bc.a4) 10:37:37:249 ExtractProfileFromBackup: A profile already
exists
USERENV(bc.a4) 10:37:37:249 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(bc.a4) 10:37:37:249 CreateLocalProfileKey: Not setting
additional Security
USERENV(bc.a4) 10:37:37:249 GetExistingLocalProfileImage: Found entry
in profile list for existing local profile
USERENV(bc.a4) 10:37:37:249 GetExistingLocalProfileImage: Local profile
image filename = <%SystemDrive%\Dokumente und Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:265 GetExistingLocalProfileImage: Expanded
local profile image filename = <C:\Dokumente und Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:281 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(bc.a4) 10:37:37:296 GetExistingLocalProfileImage: Found local
profile image file ok <C:\Dokumente und Einstellungen\wysd\ntuser.dat>
USERENV(bc.a4) 10:37:37:296 GetExistingLocalProfileImage: Failed to
query low profile unload time with error 2
USERENV(bc.a4) 10:37:37:296 Local Existing Profile Image is reachable
USERENV(bc.a4) 10:37:37:296 Local profile name is <C:\Dokumente und
Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:312 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(bc.a4) 10:37:40:874 MyRegLoadKey: Mutex released. Returning 0.
USERENV(bc.a4) 10:37:41:234 MyRegLoadKey: Mutex released. Returning 0.
USERENV(bc.a4) 10:37:41:234 CreateClassHive: existing user classes hive
found
USERENV(bc.a4) 10:37:41:234 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(bc.a4) 10:37:41:234 Profile was successfully loaded.
USERENV(bc.a4) 10:37:41:234 lpProfile->lpRoamingProfile = <>
USERENV(bc.a4) 10:37:41:249 lpProfile->lpLocalProfile = <C:\Dokumente
und Einstellungen\wysd>
USERENV(bc.a4) 10:37:41:249 lpProfile->dwInternalFlags = 0x100
USERENV(bc.a4) 10:37:41:249 RestoreUserProfile: Leaving.
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Entering
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Build numbers match
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Leaving Successfully
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: Releasing mutex.
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: Leaving with a value of 1.
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: hProfile = <0x108>
USERENV(bc.a4) 10:37:48:265
=========================================================
USERENV(bc.254) 10:37:48:499 ApplyGroupPolicy: Entering. Flags = 6
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs: Starting user Group Policy
processing...
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 EnterCriticalPolicySection: User critical
section has been claimed. Handle = 0x5d0
USERENV(bc.254) 10:37:48:499 ProcessGPOs: Machine role is 2.
USERENV(bc.254) 10:37:48:515 PingComputer: PingBufferSize set as 2048
USERENV(bc.254) 10:37:48:515 PingComputer: First time: 0
USERENV(bc.254) 10:37:48:515 PingComputer: Fast link. Exiting.
USERENV(bc.254) 10:37:48:515 ProcessGPOs: User name is:
CN=WYSD,OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE Informatik
AG,DC=intra,DC=fiveinfo,DC=ch, Domain name is: FIVE
USERENV(bc.254) 10:37:48:515 ProcessGPOs: Domain controller is:
\\dc5be02.intra.fiveinfo.ch Domain DN is intra.fiveinfo.ch
USERENV(bc.254) 10:37:48:546 MyGetDomainDNSName: Successfully
determined fqdn CN=WYSD,OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch
USERENV(bc.254) 10:37:48:546 MyGetDomainDNSName: Successfully obtained
domain dns name intra.fiveinfo.ch
USERENV(bc.254) 10:37:48:546 ProcessGPOs: Calling GetGPOInfo for normal
policy mode
USERENV(bc.254) 10:37:48:546 GetGPOInfo: ********************************
USERENV(bc.254) 10:37:48:546 GetGPOInfo: Entering...
USERENV(bc.254) 10:37:48:562 GetGPOInfo: Server connection established.
USERENV(bc.254) 10:37:48:577 GetGPOInfo: Bound successfully.
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching
<OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE Informatik
AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s):
<[LDAP://CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0][LDAP://CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0][LDAP://CN={E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0]>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching <OU=Bern,OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s): < >
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching <OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: No GPO(s) for this object.
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching
<DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s):
<[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0]>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:609 SearchDSObject: Searching
<CN=Bern,CN=Sites,CN=Configuration,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:609 SearchDSObject: No GPO(s) for this object.
USERENV(bc.254) 10:37:48:609 EvaluateDeferredGPOs: Searching for GPOs
in cn=policies,cn=system,DC=intra,DC=fiveinfo,DC=ch
USERENV(bc.254) 10:37:48:640 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:640 ProcessGPO: Searching
<CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:640 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:640 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:640 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\sysvol\intra.fiveinfo.ch\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found common name of:
<{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found display name of:
<Default Domain Policy>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found user version of: GPC is
1, GPT is 1
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found flags of: 0
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
USERENV(bc.254) 10:37:48:671 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:671 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:671 ProcessGPO: Searching
<CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:671 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{1B5660E1-F287-4680-AE57-CC6C57C80D64}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found common name of:
<{1B5660E1-F287-4680-AE57-CC6C57C80D64}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found display name of:
<Test_Workstation_Policy>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found user version of: GPC is
0, GPT is 0
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found flags of: 0
USERENV(bc.254) 10:37:48:687 ProcessGPO: No client-side extensions for
this object.
USERENV(bc.254) 10:37:48:687 ProcessGPO: GPO Test_Workstation_Policy
doesn't contain any data since the version number is 0. It will be skipped.
USERENV(bc.254) 10:37:48:687 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:687 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:687 ProcessGPO: Searching
<CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:687 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:687 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:687 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{4FA0C862-4582-45F5-8A8F-2942C54FFF27}>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found common name of:
<{4FA0C862-4582-45F5-8A8F-2942C54FFF27}>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found display name of:
<LogonScript (alle Standorte)>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found user version of: GPC is
5, GPT is 5
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found flags of: 2
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found extensions:
[{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
USERENV(bc.254) 10:37:48:702 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:702 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:702 ProcessGPO: Searching
<CN={E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:702 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9}>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found common name of:
<{E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9}>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found display name of:
<Default User Policy>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found user version of: GPC is
13, GPT is 13
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found flags of: 2
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}]
USERENV(bc.254) 10:37:48:718 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:718 GetGPOInfo: GPO Richtlinien der lokalen
Gruppe doesn't contain any data since the version number is 0. It will
be skipped.
USERENV(bc.254) 10:37:48:718 GetGPOInfo: Leaving with 1
USERENV(bc.254) 10:37:48:718 GetGPOInfo: ********************************
USERENV(bc.254) 10:37:48:718 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension Registrierung
USERENV(bc.254) 10:37:48:718 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:718 CheckGPOs: No GPO changes and no security
group membership change and extension Registrierung has NoGPOChanges set.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension Folder
Redirection
USERENV(bc.254) 10:37:48:718 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Extension Folder Redirection
skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension
Microsoft-Datenträgerkontingent
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension
Microsoft-Datenträgerkontingent skipped with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Skripts
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes and no security
group membership change and extension Skripts has NoGPOChanges set.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Security
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Security skipped
with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes but couldn't read
extension Internet Explorer Branding's status or policy time.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Internet Explorer
Branding skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension EFS recovery
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension EFS recovery skipped
with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension
Anwendungsverwaltung
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes but couldn't read
extension Anwendungsverwaltung's status or policy time.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Anwendungsverwaltung
skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension IP-Sicherheit
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension IP-Sicherheit
skipped with flags 0x6.
USERENV(bc.254) 10:37:48:734 LeaveCriticalPolicySection: Critical
section 0x5d0 has been released.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: User Group Policy has been
applied.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Leaving with 1.
USERENV(bc.254) 10:37:48:734 ApplyGroupPolicy: Leaving successfully.
USERENV(bc.3a4) 10:37:48:827 GPOThread: Next refresh will happen in 100
minutes
USERENV(5b8.5bc) 10:37:49:702 LibMain: Process Name:
C:\WINNT\system32\userinit.exe
USERENV(5c0.2f8) 10:37:49:702 LibMain: Process Name:
C:\WINNT\system32\userinit.exe
USERENV(d8.154) 10:37:49:781 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(d8.154) 10:37:49:781 GetUserNameAndDomain Failed to impersonate user
USERENV(5bc.5b8) 10:37:51:327 LibMain: Process Name:
C:\WINNT\system32\ipconfig.exe
USERENV(58c.608) 10:37:52:577 LibMain: Process Name: C:\WINNT\Explorer.EXE
USERENV(58c.5ac) 10:37:53:781 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:53:781 GetUserNameAndDomain Failed to impersonate
user
USERENV(58c.5ac) 10:37:54:187 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:54:187 GetUserNameAndDomain Failed to impersonate
user
USERENV(58c.5ac) 10:37:54:249 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:54:249 GetUserNameAndDomain Failed to impersonate
user
USERENV(614.5f8) 10:37:54:249 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(630.62c) 10:37:56:437 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(64c.648) 10:37:58:999 LibMain: Process Name:
C:\WINNT\system32\RUNDLL32.EXE
USERENV(6a8.6a4) 10:38:01:984 LibMain: Process Name: C:\WINNT\tppaldr.exe
USERENV(650.5d0) 10:38:06:687 LibMain: Process Name:
C:\Programme\IBM\Client Access\cwbinhlp.exe
USERENV(688.610) 10:38:10:062 LibMain: Process Name:
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
USERENV(63c.664) 10:38:11:718 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:718 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:734 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:749 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:749 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:765 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:765 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(234.470) 10:38:15:952 LibMain: Process Name:
C:\WINNT\system32\spoolsv.exe
USERENV(69c.1b0) 10:38:35:093 LibMain: Process Name:
C:\Programme\Extended Systems\OneBridge Desktop
Connector\DesktopConnector.exe
USERENV(6a0.664) 10:41:26:218 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:234 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:234 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:249 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:265 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:265 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:281 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(5b0.120) 10:42:33:499 LibMain: Process Name:
C:\Lotus\Notes\NLNOTES.EXE
USERENV(578.614) 10:43:53:421 LibMain: Process Name:
C:\Internet\MozillaThunderbird\thunderbird.exe
 
G

Glenn L

Here is the relevent section.

USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Skripts
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes and no security
group membership change and extension Skripts has NoGPOChanges set.

Not sure why it would fail only when logging on imediately, but no other
time.
You could modify the setting to force GPO application even when the system
detects no changes.
http://support.microsoft.com/kb/216358

--
Glenn L
CCNA, MCSE 2000, MCSE 2003 + Security


Dominic Wyss said:
Sorry for posting this late. I've been busy...
the log is below:

USERENV(c8.624) 10:34:01:703 LibMain: Process Name:
C:\WINNT\system32\mmc.exe
USERENV(bc.a4) 10:35:06:921 UnloadUserProfile: Entering, hProfile =
Click to expand...
USERENV(bc.a4) 10:35:06:921 GetUserMutex: entering
USERENV(bc.a4) 10:35:06:921 GetUserMutex: Waiting...
USERENV(bc.a4) 10:35:06:921 GetUserMutex: Wait succeeded. Mutex
currently held.
USERENV(bc.a4) 10:35:08:156 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Succesfully unloaded profile
USERENV(bc.a4) 10:35:08:156 MyRegUnloadKey: Mutex released. Returning 1.
USERENV(bc.a4) 10:35:08:156 UnLoadClassHive: Successfully unmounted
S-1-5-21-1311442653-1014379050-786498627-1044_Classes
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Successfully unloaded
user classes
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Impersonated user
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Writing local ini file
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Reverting to Self
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: exitting and cleaning up
USERENV(bc.a4) 10:35:08:156 LoadUserProfile: Releasing mutex.
USERENV(bc.a4) 10:35:08:156 UnloadUserProfile: Leaving with a return
value of 1
USERENV(790.78c) 10:35:11:343 LibMain: Process Name:
C:\WINNT\System32\SCardSvr.exe
USERENV(bc.a4) 10:36:15:812 LibMain: Process Name:
\??\C:\WINNT\system32\winlogon.exe
USERENV(d8.d4) 10:36:16:843 LibMain: Process Name:
C:\WINNT\system32\services.exe
USERENV(e4.e0) 10:36:17:140 LibMain: Process Name:
C:\WINNT\system32\lsass.exe
USERENV(e4.e0) 10:36:19:890 LibMain: Process Name:
C:\WINNT\system32\lsass.exe
USERENV(1c8.1cc) 10:36:24:062 LibMain: Process Name:
C:\WINNT\system32\svchost.exe
USERENV(1ec.1f4) 10:36:24:718 LibMain: Process Name:
C:\WINNT\System32\svchost.exe
USERENV(1bc.1c0) 10:36:25:406 LibMain: Process Name:
C:\Programme\VPNclient\IreIKE.exe
USERENV(278.294) 10:36:36:531 LibMain: Process Name:
C:\Programme\Gemeinsame Dateien\CA\BrightStor\CADS\casdscsvc.exe
USERENV(290.2e8) 10:36:38:609 LibMain: Process Name:
C:\Programme\ARCserve\msgeng.exe
USERENV(36c.368) 10:36:43:375 LibMain: Process Name:
C:\WINNT\System32\NMSSvc.exe
USERENV(3f4.3ec) 10:36:51:203 LibMain: Process Name:
C:\WINNT\system32\MSTask.exe
USERENV(3c0.3c4) 10:36:51:421 LibMain: Process Name:
C:\NORMAN\Nvc\BIN\Zanda.exe
USERENV(428.434) 10:36:52:406 LibMain: Process Name:
C:\WINNT\System32\tcpsvcs.exe
USERENV(468.464) 10:36:52:859 LibMain: Process Name:
C:\Tools\VMWare\vmware-authd.exe
USERENV(468.478) 10:36:53:343 GetHkeyCU: RegOpenKey failed with error 2
USERENV(4b8.4c8) 10:36:55:171 LibMain: Process Name:
C:\WINNT\system32\svchost.exe
USERENV(bc.500) 10:37:00:078 ApplyGroupPolicy: Entering. Flags = 7
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs: Starting computer Group
Policy processing...
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:078 ProcessGPOs:
USERENV(bc.500) 10:37:00:093 EnterCriticalPolicySection: Machine
critical section has been claimed. Handle = 0x324
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Machine role is 2.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: The DC for domain FIVE is not
available
USERENV(bc.500) 10:37:00:093 LeaveCriticalPolicySection: Critical
section 0x324 has been released.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Computer Group Policy has been
applied.
USERENV(bc.500) 10:37:00:093 ProcessGPOs: Leaving with 0.
USERENV(bc.500) 10:37:00:093 ApplyGroupPolicy: Leaving successfully.
USERENV(bc.508) 10:37:00:156 GPOThread: Next refresh will happen in 106
minutes
USERENV(530.52c) 10:37:01:703 LibMain: Process Name:
C:\NORMAN\nvc\BIN\NVCSCHED.EXE
USERENV(4d4.404) 10:37:02:125 LibMain: Process Name:
C:\Programme\ARCserve\asalert.exe
USERENV(3fc.524) 10:37:02:203 LibMain: Process Name:
C:\WINNT\System32\locator.exe
USERENV(520.528) 10:37:03:812 LibMain: Process Name:
C:\NORMAN\nvc\BIN\NJEEVES.EXE
USERENV(590.58c) 10:37:05:109 LibMain: Process Name:
C:\Programme\VPNclient\ifcfg.exe
USERENV(594.58c) 10:37:05:468 LibMain: Process Name:
C:\Programme\VPNclient\ifcfg.exe
USERENV(594.17c) 10:37:26:390 LibMain: Process Name:
C:\WINNT\System32\WBEM\WinMgmt.exe
USERENV(bc.a4) 10:37:37:234
=========================================================
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: Entering, hToken = <0x3c4>,
lpProfileInfo = 0x6f648
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: Entering, hToken = <0x3c4>,
lpProfileInfo = 0x6f648
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: lpProfileInfo->dwFlags =
Click to expand...
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: lpProfileInfo->lpUserName =
<WYSD>
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL central profile path
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL default profile path
USERENV(bc.a4) 10:37:37:249 LoadUserProfile: NULL server name
USERENV(bc.a4) 10:37:37:249 GetUserMutex: entering
USERENV(bc.a4) 10:37:37:249 GetUserMutex: Waiting...
USERENV(bc.a4) 10:37:37:249 GetUserMutex: Wait succeeded. Mutex
currently held.
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: Entering
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: User is a Admin
USERENV(bc.a4) 10:37:37:249 IsCentralProfileReachable: Entering
USERENV(bc.a4) 10:37:37:249 IsCentralProfileReachable: Null path. Leaving
USERENV(bc.a4) 10:37:37:249 RestoreUserProfile: Profile path = <>
USERENV(bc.a4) 10:37:37:249 ExtractProfileFromBackup: A profile already
exists
USERENV(bc.a4) 10:37:37:249 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(bc.a4) 10:37:37:249 CreateLocalProfileKey: Not setting
additional Security
USERENV(bc.a4) 10:37:37:249 GetExistingLocalProfileImage: Found entry
in profile list for existing local profile
USERENV(bc.a4) 10:37:37:249 GetExistingLocalProfileImage: Local profile
image filename = <%SystemDrive%\Dokumente und Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:265 GetExistingLocalProfileImage: Expanded
local profile image filename = <C:\Dokumente und Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:281 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(bc.a4) 10:37:37:296 GetExistingLocalProfileImage: Found local
profile image file ok <C:\Dokumente und Einstellungen\wysd\ntuser.dat>
USERENV(bc.a4) 10:37:37:296 GetExistingLocalProfileImage: Failed to
query low profile unload time with error 2
USERENV(bc.a4) 10:37:37:296 Local Existing Profile Image is reachable
USERENV(bc.a4) 10:37:37:296 Local profile name is <C:\Dokumente und
Einstellungen\wysd>
USERENV(bc.a4) 10:37:37:312 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(bc.a4) 10:37:40:874 MyRegLoadKey: Mutex released. Returning 0.
USERENV(bc.a4) 10:37:41:234 MyRegLoadKey: Mutex released. Returning 0.
USERENV(bc.a4) 10:37:41:234 CreateClassHive: existing user classes hive
found
USERENV(bc.a4) 10:37:41:234 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(bc.a4) 10:37:41:234 Profile was successfully loaded.
USERENV(bc.a4) 10:37:41:234 lpProfile->lpRoamingProfile = <>
USERENV(bc.a4) 10:37:41:249 lpProfile->lpLocalProfile = <C:\Dokumente
und Einstellungen\wysd>
USERENV(bc.a4) 10:37:41:249 lpProfile->dwInternalFlags = 0x100
USERENV(bc.a4) 10:37:41:249 RestoreUserProfile: Leaving.
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Entering
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Build numbers match
USERENV(bc.a4) 10:37:48:249 UpgradeProfile: Leaving Successfully
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: Releasing mutex.
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: Leaving with a value of 1.
USERENV(bc.a4) 10:37:48:265 LoadUserProfile: hProfile = <0x108>
USERENV(bc.a4) 10:37:48:265
=========================================================
USERENV(bc.254) 10:37:48:499 ApplyGroupPolicy: Entering. Flags = 6
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs: Starting user Group Policy
processing...
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 ProcessGPOs:
USERENV(bc.254) 10:37:48:499 EnterCriticalPolicySection: User critical
section has been claimed. Handle = 0x5d0
USERENV(bc.254) 10:37:48:499 ProcessGPOs: Machine role is 2.
USERENV(bc.254) 10:37:48:515 PingComputer: PingBufferSize set as 2048
USERENV(bc.254) 10:37:48:515 PingComputer: First time: 0
USERENV(bc.254) 10:37:48:515 PingComputer: Fast link. Exiting.
USERENV(bc.254) 10:37:48:515 ProcessGPOs: User name is:
CN=WYSD,OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE Informatik
AG,DC=intra,DC=fiveinfo,DC=ch, Domain name is: FIVE
USERENV(bc.254) 10:37:48:515 ProcessGPOs: Domain controller is:
\\dc5be02.intra.fiveinfo.ch Domain DN is intra.fiveinfo.ch
USERENV(bc.254) 10:37:48:546 MyGetDomainDNSName: Successfully
determined fqdn CN=WYSD,OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch
USERENV(bc.254) 10:37:48:546 MyGetDomainDNSName: Successfully obtained
domain dns name intra.fiveinfo.ch
USERENV(bc.254) 10:37:48:546 ProcessGPOs: Calling GetGPOInfo for normal
policy mode
USERENV(bc.254) 10:37:48:546 GetGPOInfo: ********************************
USERENV(bc.254) 10:37:48:546 GetGPOInfo: Entering...
USERENV(bc.254) 10:37:48:562 GetGPOInfo: Server connection established.
USERENV(bc.254) 10:37:48:577 GetGPOInfo: Bound successfully.
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching
<OU=NEW_LOGON_SCRIPT_TEST,OU=Bern,OU=FIVE Informatik
AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s):
<[LDAP://CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=
intra,DC=fiveinfo,DC=ch;0][LDAP://CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},
CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0][LDAP://CN={E69D9E1C-68D3
-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=intra,DC=fiveinfo,DC=ch;0]

USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=i
ntra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},CN=Policies,CN=System,DC=i
ntra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=i
ntra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching <OU=Bern,OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s): < >
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching <OU=FIVE
Informatik AG,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: No GPO(s) for this object.
USERENV(bc.254) 10:37:48:593 SearchDSObject: Searching
<DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:593 SearchDSObject: Found GPO(s):
<[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=
intra,DC=fiveinfo,DC=ch;0]>
USERENV(bc.254) 10:37:48:593 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:593 ProcessGPO: Deferring search for
<LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=i
ntra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:609 SearchDSObject: Searching
<CN=Bern,CN=Sites,CN=Configuration,DC=intra,DC=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:609 SearchDSObject: No GPO(s) for this object.
USERENV(bc.254) 10:37:48:609 EvaluateDeferredGPOs: Searching for GPOs
in cn=policies,cn=system,DC=intra,DC=fiveinfo,DC=ch
USERENV(bc.254) 10:37:48:640 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:640 ProcessGPO: Searching
<CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=intra,DC
=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:640 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:640 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:640 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\sysvol\intra.fiveinfo.ch\Policies\{31B2F340-016D-11D2-9
45F-00C04FB984F9}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found common name of:
<{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found display name of:
<Default Domain Policy>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found user version of: GPC is
1, GPT is 1
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found flags of: 0
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4
}]
USERENV(bc.254) 10:37:48:671 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:671 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:671 ProcessGPO: Searching
<CN={1B5660E1-F287-4680-AE57-CC6C57C80D64},CN=Policies,CN=System,DC=intra,DC
=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:671 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{1B5660E1-F287-4680-A
E57-CC6C57C80D64}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found common name of:
<{1B5660E1-F287-4680-AE57-CC6C57C80D64}>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found display name of:
<Test_Workstation_Policy>
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found user version of: GPC is
0, GPT is 0
USERENV(bc.254) 10:37:48:671 ProcessGPO: Found flags of: 0
USERENV(bc.254) 10:37:48:687 ProcessGPO: No client-side extensions for
this object.
USERENV(bc.254) 10:37:48:687 ProcessGPO: GPO Test_Workstation_Policy
doesn't contain any data since the version number is 0. It will be skipped.
USERENV(bc.254) 10:37:48:687 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:687 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:687 ProcessGPO: Searching
<CN={4FA0C862-4582-45F5-8A8F-2942C54FFF27},CN=Policies,CN=System,DC=intra,DC
=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:687 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:687 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:687 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{4FA0C862-4582-45F5-8
A8F-2942C54FFF27}>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found common name of:
<{4FA0C862-4582-45F5-8A8F-2942C54FFF27}>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found display name of:
<LogonScript (alle Standorte)>
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found user version of: GPC is
5, GPT is 5
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found flags of: 2
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found extensions:
[{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3
}]
USERENV(bc.254) 10:37:48:702 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:702 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:702 ProcessGPO: Searching
<CN={E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9},CN=Policies,CN=System,DC=intra,DC
=fiveinfo,DC=ch>
USERENV(bc.254) 10:37:48:702 ProcessGPO: User has access to this GPO.
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found functionality version of: 2
USERENV(bc.254) 10:37:48:702 ProcessGPO: Found file system path of:
<\\intra.fiveinfo.ch\SysVol\intra.fiveinfo.ch\Policies\{E69D9E1C-68D3-4BE7-B
E91-4D59F8870FB9}>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found common name of:
<{E69D9E1C-68D3-4BE7-BE91-4D59F8870FB9}>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found display name of:
<Default User Policy>
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found user version of: GPC is
13, GPT is 13
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found flags of: 2
USERENV(bc.254) 10:37:48:718 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3
}]
USERENV(bc.254) 10:37:48:718 ProcessGPO: ==============================
USERENV(bc.254) 10:37:48:718 GetGPOInfo: GPO Richtlinien der lokalen
Gruppe doesn't contain any data since the version number is 0. It will
be skipped.
USERENV(bc.254) 10:37:48:718 GetGPOInfo: Leaving with 1
USERENV(bc.254) 10:37:48:718 GetGPOInfo: ********************************
USERENV(bc.254) 10:37:48:718 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension Registrierung
USERENV(bc.254) 10:37:48:718 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:718 CheckGPOs: No GPO changes and no security
group membership change and extension Registrierung has NoGPOChanges set.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension Folder
Redirection
USERENV(bc.254) 10:37:48:718 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Extension Folder Redirection
skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:718 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:718 ProcessGPOs: Processing extension
Microsoft-Datenträgerkontingent
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension
Microsoft-Datenträgerkontingent skipped with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Skripts
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes and no security
group membership change and extension Skripts has NoGPOChanges set.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Security
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Security skipped
with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes but couldn't read
extension Internet Explorer Branding's status or policy time.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Internet Explorer
Branding skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension EFS recovery
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension EFS recovery skipped
with flags 0x6.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension
Anwendungsverwaltung
USERENV(bc.254) 10:37:48:734 CompareGPOLists: The lists are the same.
USERENV(bc.254) 10:37:48:734 CheckGPOs: No GPO changes but couldn't read
extension Anwendungsverwaltung's status or policy time.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension Anwendungsverwaltung
skipped because both deleted and changed GPO lists are empty.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: -----------------------
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Processing extension IP-Sicherheit
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Extension IP-Sicherheit
skipped with flags 0x6.
USERENV(bc.254) 10:37:48:734 LeaveCriticalPolicySection: Critical
section 0x5d0 has been released.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: User Group Policy has been
applied.
USERENV(bc.254) 10:37:48:734 ProcessGPOs: Leaving with 1.
USERENV(bc.254) 10:37:48:734 ApplyGroupPolicy: Leaving successfully.
USERENV(bc.3a4) 10:37:48:827 GPOThread: Next refresh will happen in 100
minutes
USERENV(5b8.5bc) 10:37:49:702 LibMain: Process Name:
C:\WINNT\system32\userinit.exe
USERENV(5c0.2f8) 10:37:49:702 LibMain: Process Name:
C:\WINNT\system32\userinit.exe
USERENV(d8.154) 10:37:49:781 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(d8.154) 10:37:49:781 GetUserNameAndDomain Failed to impersonate user
USERENV(5bc.5b8) 10:37:51:327 LibMain: Process Name:
C:\WINNT\system32\ipconfig.exe
USERENV(58c.608) 10:37:52:577 LibMain: Process Name: C:\WINNT\Explorer.EXE
USERENV(58c.5ac) 10:37:53:781 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:53:781 GetUserNameAndDomain Failed to impersonate
user
USERENV(58c.5ac) 10:37:54:187 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:54:187 GetUserNameAndDomain Failed to impersonate
user
USERENV(58c.5ac) 10:37:54:249 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(58c.5ac) 10:37:54:249 GetUserNameAndDomain Failed to impersonate
user
USERENV(614.5f8) 10:37:54:249 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(630.62c) 10:37:56:437 LibMain: Process Name:
C:\WINNT\system32\mobsync.exe
USERENV(64c.648) 10:37:58:999 LibMain: Process Name:
C:\WINNT\system32\RUNDLL32.EXE
USERENV(6a8.6a4) 10:38:01:984 LibMain: Process Name: C:\WINNT\tppaldr.exe
USERENV(650.5d0) 10:38:06:687 LibMain: Process Name:
C:\Programme\IBM\Client Access\cwbinhlp.exe
USERENV(688.610) 10:38:10:062 LibMain: Process Name:
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
USERENV(63c.664) 10:38:11:718 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:718 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:734 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:749 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:749 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:765 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(63c.664) 10:38:11:765 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(234.470) 10:38:15:952 LibMain: Process Name:
C:\WINNT\system32\spoolsv.exe
USERENV(69c.1b0) 10:38:35:093 LibMain: Process Name:
C:\Programme\Extended Systems\OneBridge Desktop
Connector\DesktopConnector.exe
USERENV(6a0.664) 10:41:26:218 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:234 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:234 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:249 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:265 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:265 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(6a0.664) 10:41:26:281 LibMain: Process Name: C:\WINNT\explorer.exe
USERENV(5b0.120) 10:42:33:499 LibMain: Process Name:
C:\Lotus\Notes\NLNOTES.EXE
USERENV(578.614) 10:43:53:421 LibMain: Process Name:
C:\Internet\MozillaThunderbird\thunderbird.exe
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

logon scripts not executed when system restarted 2
It seems logon/startup scripts don't run on WinXP workstations 2
USER LOGON 1
Logon Scripts in AD 1
User with logon scripts problem 1
Logon / Logoff Scripts for Domain - Active Directory Server 1
User Logon Scripts 3
Cross domain Logon scripts. 3

Top