login script not execute after raising functional level to native

[Guest]

I have one master domain and many resource domain spread across many sites,
users accounts are in master domain and computers account in to resource
domain, users logged in to master domain thru the machines in the resource
domain, these domains are trusted with non-transitive trust relationship.

when users login to the machine, login script of the users in master domain
should execute, but it is not executing after the functional level of the
master domain is raised to native mode. Before raising to native mode, in
mixed mode it is working properly. If I enable the setting in "script policy
processing" in the machines login script is working. How to make settings at
domain controller so all the machines should take effect the login script.

 

[Herb Martin]

"login script not execute" <login script not
(e-mail address removed)> wrote in message

I have one master domain and many resource domain spread across many sites,
users accounts are in master domain and computers account in to resource
domain, users logged in to master domain thru the machines in the resource
domain, these domains are trusted with non-transitive trust relationship.

This is a setup common in NT, but not for Win2000+
except as a migration strategy.

It is however, technically feasible.

when users login to the machine, login script of the users in master domain
should execute, but it is not executing after the functional level of the
master domain is raised to native mode. Before raising to native mode, in
mixed mode it is working properly. If I enable the setting in "script policy
processing" in the machines login script is working. How to make settings at
domain controller so all the machines should take effect the login script.

You would be better served with a SINGLE Forest and
this may be (part) of the problem.

The machines from the resource domain cannot authenticate
over the explicit trusts (as they could in a forest), it may be
that the computer has to download the Group Policy and the
logon scripts -- even though they are for the user.

Migrate the computer accounts to a forest domain -- or just
migrate them into the single domain.

Master domains are not required for delegating authority
in AD as you can use OUs for such purposes.
[/QUOTE]

 

[Guest]

My problem is before raising the functional level of master domain, login
script is working well. After raising functional level some of the machines
are not executing login script. Any usefull answer from any body please.

"login script not execute" <login script not
(e-mail address removed)> wrote in message


This is a setup common in NT, but not for Win2000+
except as a migration strategy.

It is however, technically feasible.


You would be better served with a SINGLE Forest and
this may be (part) of the problem.

The machines from the resource domain cannot authenticate
over the explicit trusts (as they could in a forest), it may be
that the computer has to download the Group Policy and the
logon scripts -- even though they are for the user.

Migrate the computer accounts to a forest domain -- or just
migrate them into the single domain.

Master domains are not required for delegating authority
in AD as you can use OUs for such purposes.

[/QUOTE]

 

[Herb Martin]

My problem is before raising the functional level of master domain, login
script is working well. After raising functional level some of the machines
are not executing login script. Any usefull answer from any body please.

Domain modes or forest functional levels have pratically
nothing to do with Users or Computers directly.

Extra features might be enabled, especially for users, but
that is about it.

I would look to authentication issues -- for both computers
and users authentication is essential and more such problems
are really DNS based..
[/QUOTE][/QUOTE]